Ukiah Valley Medical Center

Report ID: DE2U11, California Department of Public Health

Reported Entity: UKIAH VALLEY MEDICAL CENTER/HOSPITAL D

Issue:

Based on staff interview and facility record review, the facility failed to ensure that Patient Health Information was safeguarded from unauthorized use for one patient (Patient 1), when patient health information for Patient 1 was on a prescription given to Patient 2. Findings:On 4/16/12 at 11:19 a.m., The California Department of Public Health received a faxed report from the facility that a breach of patient health information had occurred on 4/12/12, and the facility became aware of the breach on 4/13/12. During an interview on 4/19/12 at 2 p.m., Administrative Staff A stated that Patient 1 and Patient 2 were both being seen in the Emergency Department in the evening of 4/12/12. Patient 2 received a prescription for her rash and was discharged. Administrative Staff A stated when Patient 2 arrived home, she noted that the wrong name was on her prescription. She had her husband return to the emergency department to give back the prescription with the wrong name. Her husband was given a new prescription and when he returned home it was noted that the second prescription had Patient 1's name, date of birth, and medical record number written on it. Patient 2 notified Administrative Staff A the next morning (4/13/12), and Administrative Staff A stated he drove to Patient 2's home, picked up the prescription, and when he returned to the facility he shredded the prescription. He reported the incident to the risk manager immediately.Administrative Staff A stated since Patient 1 was an infant, the parents were notified by phone with a follow up letter that the breach had occurred. Review of a copy of the letter confirmed this.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280