EISENHOWER MEDICAL CENTER

Report ID: GVHT11.01, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to ensure the PHI (protected health information) of Patient A remained confidential. This failure resulted in the unauthorized disclosure of Patient A's name, address, account number, date of birth, and a description of medical tests which were conducted to Patient B.Findings:An interview was conducted with the facility's Compliance Specialist (CS) on October 11, 2013, at 2 p.m. The CS stated a staff member employed by a business associate which conducts billing for the facility mailed Patient A's PHI to Patient B, who mailed it back to the facility. A review of Patient A's PHI which was disclosed to the Patient B reflected Patient A's name, address, account number, date of birth and a description of medical tests which were conducted.A review of the facility policy, "HIPPA-Use and disclosure of Protected Health Information (HIPPA-health information portability and accountability act), last Reviewed/Revised 11/18/2011," was conducted. The policy indicated, "It is the policy of (the facility) that the confidentiality of Protected Health information contained in records and collected pursuant to treatment will be protected to the fullest extent possible. To maintain this confidentiality (facility) staff may not disseminate PHI unless it is pursuant to a valid request, a valid authorization or a legally recognized exception to this requirement."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: EEXU11.01