LOMA LINDA UNIVERSITY MEDICAL CENTER

Report ID: 98F011.01, California Department of Public Health

Reported Entity: LOMA LINDA UNIVERSITY MEDICAL CENTER, TRANSPLANT I

Issue:

Based on interview, and record review, the facility failed to ensure that staff verified the names on all documents being given to patients to protect confidential protected health information (PHI). This failure to verify the name on a transplant document belonging to Patient B, resulted in the form being given to Patient A , placing Patient B at risk for identity theft.Findings:On May 6, 2014 a phone interview was conducted with the Compliance Officer regarding an entity reported incident of a breach of PHI for Patient B. The Compliance Officer, stated, "On March 14, 2014, Patient A called and told me that she had been given a form [information from the transplant unit including, name, diagnoses and appointment schedule] belonging to another person [Patient A]. She brought the form back in, and attested that she had not copied it. We were unable to identify who had given the document in error, so we had all staff in that department do a training module related to confidentiality."A copy of the form provided to Patient A, contained the following PHI for Patient B: name, medical problems, height, weight, age, medications and allergies. It also identified Patient B as a kidney donor.The failure to protect Patient B's PHI, had the potential for the information to be used in identity theft, or in a manner not authorized by the patient.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

2 other violations reported on the same date. Note that other citations may be about the same event: TL4D11.01, UBFE11.01