MARIN GENERAL HOSPITAL

Report ID: 5TE811.01, California Department of Public Health

Reported Entity: MARIN GENERAL HOSPITAL

Issue:

Based on interview and document review, the hospital failed to prevent unauthorized access to one patient's protected health information (PHI).Findings:In interview on 2/29/12 at 8:00 a.m., Staff A stated that late in the afternoon on 12/5/11, Staff B received a call from Physician C stating that he had received an x-ray report on Patient 1. Physician C stated that Patient 1 was not one of his patients. Staff B notified Staff A on 12/6/11 at 5:41 p.m. that the error had occurred and that the x-ray report was intended for Physician D, same last name. Staff A stated that Staff E had not verified the name of the intended recipient according to protocol. Staff A stated that the radiology technician pulls up a list of names on the computer and clicks on the name of the intended recipient. The report then is transmitted automatically. Staff A stated that Staff E did not double check the name of the ordering physician before performing the x-ray. Staff A stated that Physician B shredded the document. Staff A stated that the Department and Patient 1 were notified of the breach on 12/13/11Record review on 2/29/12 demonstrated that Patient 1's breached PHI consisted of name, reason for x-ray, x-ray type, date of service, ordering physician, and result.Record review on 2/29/12 confirmed that the Department was notified of the breach on 12/12/11 at 2:05 p.m. Patient 1 was notified on 12/13/11, six business days after the event was discovered.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

The report containing this deficiency also includes information about 3 other violations. Note that these may be related to the same event: 5TE811.02, 5TE811.03, 5TE811.04

3 other violations reported on the same date. Note that other citations may be about the same event: 6U9R11.01, NHZX11.01, TI9K11.01