RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Report ID: JBS811.01, California Department of Public Health

Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to ensure Patient A's protected health information (PHI) was kept private, when Patient A's prescription was inadvertently seen by an unintended recipient. This resulted in the unauthorized disclosure of Patient A's PHI, and the potential for misuse of the information.Findings:On January 16, 2014, the facility notified the California Department of Public Health that a prescription containing Patient A's PHI was inadvertently seen/handled by the wrong patient. On January 28, 2014, at 10:15 a.m., an interview was conducted with the Administrative Services Officer (ASO). The ASO stated on January 10, 2014, while discharging Patient A, a prescription slip "went missing." The ASO stated the nurse may have been careless and dropped the prescription when she was discharging Patient A. The prescription was eventually brought to the staff by another patient. The ASO stated the prescription contained Patient A's name, date of birth, medical record number, and date of service. There was no copy of the prescription for review. The facility policy and procedure titled "Patient Privacy, Confidentiality, Medical Records, and Access to, or Release or Disclosure of, Patient Information," revised on January 2, 2009, was reviewed. The policy indicated its purpose was "To protect patients' rights to privacy and security of their healthcare information...its personnel shall reasonably safeguard confidential information from any unauthorized access or unlawful access use, or disclosure."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

5 other violations reported on the same date. Note that other citations may be about the same event: 8JC511.01, JSX011.01, JSX011.02, XGYY11.01, XWPC11.01