Ukiah Valley Medical Center

Report ID: JLZZ11.01, California Department of Public Health

Reported Entity: UKIAH VALLEY MEDICAL CENTER/HOSPITAL D

Issue:

Based on interview and document review, the hospital failed to protect one patient's protected health information (PHI) from access by an unauthorized person.Findings:In interview on 9/6/12 at 8:30 am, Staff A stated that on 7/9/12, a patient in custody (Patient 1) was discharged from the emergency department (ED). His discharge records were given to the detaining law enforcement officer in an unsealed envelope. Staff B noticed that the envelope was unsealed when Staff C handed it to the officer. After Patient 1 had exited, Staff B told Staff C what she had noticed. Staff C reported the breach to Staff A.Staff A stated that when she reviewed the incident, she determined that Staff C had used an obsolete form when preparing Patient 1's documents. The form used required the detaining officer's signature, affording the officer the opportunity to view the medical information on the form. The old form had not been removed from the ED when the new form, which did not require the detaining officer's signature, replaced it. Staff A stated that the hospital informed Patient 1 of the breach on 7/10/12. She stated that she informed the Department of the breach on 7/10/12, as well.Document review on 9/6/12, demonstrated that the PHI breached consisted of Patient 1's name, age, date of birth, medical record number, and diagnosis.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: 3OG611.01