EISENHOWER MEDICAL CENTER

Report ID: BJKK11.01, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and document review, the facility failed to ensure their (PHI) Protected Health Information was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's medical records and demographic information.Findings:On September 10, 2012, an unannounced visit was made to the facility to investigate a breach of PHI.An interview was conducted with the Compliance Officer, on September 10, 2012, at 1 p.m. The Compliance Officer stated the breach of protected health information occurred on March 19, 2012. The Compliance Officer stated the two patients involved had the same name. Patient B requested a copy of their medical records. The EMC employee did not verify the name and date of birth of Patient B to ensure they were sending the correct records. As a result, Patient A's medical records were sent to Patient B. The facility's policy and procedure titled, "HIPAA - Use and Disclosure of Protected Health Information," was reviewed. The policy indicated, "To protect the patient's right to privacy and confidentiality, at no time will names or information be shared with any person who does not have a need to know in order to provide patient care..." The facility failed to ensure Patient A's Protected Health Information was not disclosed to any entity not authorized to receive the information.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

16 other violations reported on the same date. Note that other citations may be about the same event: 0B0011.01, 0RFI11.01, 5RJU11.01, 6Y8Z11.01, 78UZ11.01, 8W3U11.01, FOJX11.01, HQLM11.01, IBVX11.01, M5TE11.01, OVIN11.01, Q1SN11.01, TOBU11.01, WHRC11.01, WHRC11.02, XRSE11.01