MARIN GENERAL HOSPITAL

Report ID: FPFL11.01, California Department of Public Health

Reported Entity: MARIN GENERAL HOSPITAL

Issue:

Based on interview, clinical record and administrative document review, the hospital failed to ensure unauthorized access of personal and patient health information when Patient 10's Emergency Department report was faxed to an unauthorized physician by error. This failure resulted in a unauthorized access of personal and patient health information and possible unauthorized use of the information.Findings:In an interview on 8/3/12 at 10 a.m., the Compliance/Privacy Officer stated that, on 3/14/12, medical information of Patient 10 was misdirected via fax to an unauthorized physician. He stated that he first became aware of the breach of confidentiality on 3/15/12 and informed the Department on 3/16/12. He explained that the information for Patient 10 was intended for a physician in the network. There were two physicians with the same last name (a different first name). The report was sent, by a transcription service, to a physician who was not on staff. The transcriptionist selected the wrong first name. The Privacy Officer confirmed the information which was sent.Review of administrative documents revealed that the information transmitted included Patient 10's name, age, medical record and account numbers, and medical information. Review of the administrative documents demonstrated that Patient 10 was informed of the breach on 3/16/12.The transcriptionist failed to verify the physician's first name when sending the fax to ensure it was sent to the correct physician.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

6 other violations reported on the same date. Note that other citations may be about the same event: 55SR11.01, 9AYY11.01, KXIJ11.01, NYQ411.01, PR8A11.01, ZG7T11.01