EISENHOWER MEDICAL CENTER

Report ID: FYY511.02, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to notify the California Department of Public Health (CDPH) of the unauthorized disclosure of Patient A and Patient B's protected health information (PHI) within five business days after the disclosure was detected by the facility. This resulted in a delay in the notification of CDPH and a possible delay in the investigation of the unauthorized disclosure of Patient A and B's PHI. Findings:On November 20, 2013, at 10 a.m., the Compliance Specialist (CS) was interviewed. The CS stated on October 13, 2013, an employee in the Emergency Department (ED) faxed two face sheets belonging to Patient A and Patient B to an unintended insurance provider. The insurance provider notified the ED on the same day of the error. The CS stated, the ED staff did not notify the Privacy Department until 12 days later. She stated they should have notified them right away.The CS stated she was aware of the five day requirement to notify CDPH.The facility policy and procedure titled, "Information Privacy," reviewed/revised December 19, 2011, revealed, "... The Information Privacy Officer will contact the Department within (5) five days of discovery..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

The report containing this deficiency also includes information about 2 other violations. Note that these may be related to the same event: FYY511.01, FYY511.03

3 other violations reported on the same date. Note that other citations may be about the same event: BQ4Y11.01, JIFE11.01, YC2R11.01