MAMMOTH HOSPITAL

Report ID: 4L0D11.01, California Department of Public Health

Reported Entity: MAMMOTH HOSPITAL

Issue:

Based on interview and record review, the facility failed to ensure the confidential treatment of Patient B's protected health information (PHI) when a bill receipt was given to Patient A during a clinic visit. This failure resulted in the unauthorized release of Patient B's PHI to Patient A. Findings:During an interview on January 30, 2014 at 2:00 PM, with the facility privacy officer (FPO) related to an entity reported incident of a breach of PHI for Patient B, she stated, "On January 2, 2014, Patient A came into the clinic and was given the receipt for Patient B's visit. The receipt contained Patient B's: name, address, medical record number, encounter number, date of visit, name of physician and the amount of the bill."During a review of the facility's policy and procedure titled, "Release of Protected Health Information," dated March 29, 2013, the policy listed PHI as:" Any information, whether oral, ocular (seen), or recorded in any form or medium that is created or received by the operations of [named facility]; and related to past, present or future physical or mental health or condition of an individual; the provision of health care to an individual; or past, present or future payment for provision of health care to an individual." The failure to maintain confidentiality of this information resulted in a breach.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

2 other violations reported on the same date. Note that other citations may be about the same event: 16PJ11.01, SGJO11.01