KAISER FOUNDATION HOSPITAL - RIVERSIDE

Report ID: 9BRK11.01, California Department of Public Health

Reported Entity: KAISER FOUNDATION HOSPITAL, RIVERSIDE

Issue:

Based on interview and document review, the facility failed to ensure that Patient A's Protected Health Information (PHI) was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's demographic information and Protected Health Information.Findings:On August 12, 2013, at 1 p.m. an interview was conducted with the Compliance Officer and Director of Accreditation and Licensing. The Compliance Officer stated the hospital became aware of the breach on July 30, 2013. The breach occurred in the admitting department, when the financial counselor in the admitting department mailed the Medical Financial Assistance Approval Letter for Patient A to Patient B. In an interview with the admitting manager, on August 12, 2013, at 1:45 p.m., the admitting manager stated she had not completed her investigation and was unable to identify why the financial counselor sent the documents to the wrong address. The facility's policy and procedure titled, "Patient's Rights," was reviewed. The policy indicated the hospital the patients had the right to privacy and confidentiality and the right to have their medical records and private information read only by individuals directly involved in their treatment or in monitoring of its quality and by other individuals only with their written authorization or that of their legally authorized representative..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: QM3511.01