SOUTH COAST GLOBAL MEDICAL CENTER

Report ID: 85XW11.02, California Department of Public Health

Reported Entity: COASTAL COMMUNITIES HOSPITAL

Issue:

Based on interview and hospital document review, the hospital failed to prevent the disclosure of three patients' protected health information (PHI) to unauthorized individuals (Patients O, P and Q). In addition, the hospital failed to report the disclosure of PHI to Patient P within five business days of the hospital's knowledge of the breach. Findings:Review of hospital documentation showed, on 3/31/12, Patient O was seen in the hospital's Emergency Department (ED). On 4/1/12, Patients P and Q were seen in the ED.Further review of the hospital's investigation showed Patient O, P and Q's addressograph had been accidentally used to stamp three other patient's Aftercare Discharge Instructions. The three other patient's took their Aftercare Discharge Instructions with them upon discharge from the ED. The PHI belonging to Patient's O, P and Q was disclosed to these unauthorized individuals.The PHI disclosed included name, age, sex, account and medical record numbers, and date of admission.Additionally, the hospital's knowledge of the breach occurred on 4/5/12. However, Patient P was not notified of the breach of PHI until 4/18/12.On 11/15/12 at 1400 hours, a conference call with the Director of Compliance confirmed the breach of PHI and the dates of notification were as documented.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

The report containing this deficiency also includes information about 2 other violations. Note that these may be related to the same event: 85XW11.01, 85XW11.03