ST MARY MEDICAL CENTER

Report ID: W18911.02, California Department of Public Health

Reported Entity: ST MARY MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to safeguard Patient A and Patient B's protected health information (PHI), when Patient A's e-MAR (electronic Medication Administration Record) and Patient B's consult order was sent with Patient C's medical information to another acute care facility.Finding:During an interview with the Risk Management Data Analyst on July 11, 2014 at 2:00 PM, the Analyst verified that the breach had occurred on June 18, 2013, when Patient A's e-MAR, and Patient B's consult order were commingled with Patient C's medical information upon transfer to another acute care facility. The e-MAR includes confidential protected health information, such as Patient A's name, medical record number and medication orders/record. The consult order for Patient B includes name, diagnosis, date of birth and medical record number. The acute care facility for Patient C notified the facility of the breach via fax on August 13, 2013 .During a review of the facility Policy and Procedure, titled "Confidential Policy", dated January 24, 2012, indicated..."employees are required to follow all policies and procedures and [name of corporations's] Standards of Conduct regarding use and disclosure of business and patient information."The facility's failure to check each page of Patient C's information being sent to an outside facility resulted in the unauthorized release of Patient A and Patient B's PHI.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

The report containing this deficiency also includes information about 1 other violation. Note that these may be related to the same event: W18911.01