RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Report ID: WKHE11.01, California Department of Public Health

Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Issue:

Based on interview and document review, the facility failed to ensure that Patient A's Protected Health Information (PHI) was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's demographic information, medical records, and Protected Health Information.Findings:On October 21, 2013, a self reported breach of Protected Health Information for Patient A was investigated. On October 21, 2013, at 9 a.m., and interview was conducted with the Compliance Officer. The Compliance officer stated the breach occurred on September 27, 2013. The breach was reported through the Compliance Hotline. Patient B received his medications by mail along with Patient A's Haldol medication and medical information specific to Patient A. The Compliance Officer stated the individual in the pharmacy that was packaging the medication failed to double check the patient identifiers prior to sending the medication out. The facility policy and procedure titled "Patient Identification," was reviewed. The policy stated, "This policy and procedure establishes a standard process to verify patient identity, using two unique identifiers, when providing care, treatment, and services...All healthcare team members will use two unique, patient-specific identifiers to assist in correct identification of the patient..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

7 other violations reported on the same date. Note that other citations may be about the same event: 11CG11.01, 21NM11.01, 4K5R11.01, 5C6Q11.01, CP0L11.01, CP0L11.02, CP0L11.03