EISENHOWER MEDICAL CENTER

Report ID: 7DQI11, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to prevent unauthorized disclosure of protected health information (PHI) for one patient (Patient 1). A laboratory employee faxed Patient 1's lab results to the wrong number. This failure resulted in an unauthorized person having access to Patient 1's PHI and the potential misuse of the information.Findings:On November 19, 2014, at 2 p.m., Legal Counsel (LC) 1 was interviewed. LC 1 stated there was a lab order for Patient 1 sent over to the facility laboratory that contained a fax number. She stated the order indicated to fax the results of Patient 1's lab test to this number.On October 29, 2014, the laboratory technician faxed Patient 1's results to the fax number on the physician order. On the same day, the laboratory was notified that Patient 1's lab results had been faxed to a private business. The laboratory called the physician and discovered the wrong fax number had been written on the order form.The lab results sent to the private business contained Patient 1's PHI as follows:- Name;- Date of birth;- Results of blood tests;- Medical record number; and- Account number.The policy and procedure titled, "Faxing Protected Health Information," dated March 2013, was reviewed. The policy indicated, "All Protected Health Information sent or received by [Facility Name] shall be in a manner that protects against unauthorized disclosure of such records to third parties..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280