Adventist Medical Center

Report ID: 7K4V11.01, California Department of Public Health

Reported Entity: ADVENTIST MEDICAL CENTER

Issue:

Based on staff interview and administrative document review, the hospital failed to keep Protected Health Information (PHI) confidential when Patient 1's PHI was mailed to an unauthorized recipient. This failure resulted in the breach of Patient 1's PHI and possible unauthorized use. Findings: 1. On 08/1/14 at 3 p.m., during an interview, the Privacy Officer (PO) stated the [hospital] Infection Control Department mailed a letter to Patient 2 on 7/15/14, informing her of possible exposure to tuberculosis during an emergency room visit on 6/19/14. On the other side of the page was the same letter, with Patient 1's PHI at the top of the page. There was no determination how this occured. Review of the medical record indicated the following PHI was included in the letter to Patient 2; Patient 1's name, address and date of service in the emergency room.The (Hospital) Policy number 1000.08.09, titled, "Policy: Confidentiality of Protected Health Information" dated 10/12/11 indicated, "Summary/Intent: The purpose of this policy is to provide guidelines to ensure the confidentiality and integrity of patient information. 1. 'Carelessness' is defined as a breach that occurs when patient information is unintentionally or carelessly accessed or ... revealed to others without a legitimate need to know the patient information."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: RTF511.01