ST BERNARDINE MEDICAL CENTER

Report ID: FWD211.01, California Department of Public Health

Reported Entity: ST BERNARDINE MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to protect Patient A's medical information. This breach caused Patient A's protected health care information to be released.Findings:The facility self reported that Patient A's records had been faxed from the release information desk in the Health Information Management Department to an unintended audience. The information faxed in error consisted of the History and Physical exam report, Operative report, and the Discharge Summary that included the name of the patient, age, room number, physician name, medical record number and encounter number. During an interview with the health information officer on 9/7/11, she confirmed that Employee A had violated the facility's policy of safeguarding Patient A's health information.Review of the facility's policy and procedure titled "Safeguarding PHI and Sensitive Information" , effective date: 1/5/09 indicated, "It is the policy of ... to provide appropriate access to its information based on a need-to-know basis while preserving its confidentiality and integrity. The ... facility shall implement reasonable and appropriate administrative, technical, and physical safeguards ..." It also stipulated that "The sender should confirm that the fax number is approved for receipt of sensitive information.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: PJ9X11.01