RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Report ID: GPOF11.01, California Department of Public Health

Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to prevent the unauthorized access and or disclosure of Patient A's medical/private information. This failure had the potential to result in the misuse of Patient A's medical/private information.Findings:During an interview with the Compliance Officer (CO), on November 14, 2013, at 1:20 p.m., she stated the facility was informed by an unintended mail recipient they had received a promissory note document intended for Patient A.The CO stated the facility's practice was to double check documents prior to being placed in a pre-addressed envelope. The CO stated staff did not double check the document intended for Patient A prior to being mailed.The document sent to the unintended recipient contained Patient A's name and hospital account number.The facility policy and procedure titled "Breach of Patient Privacy: Reporting Requirements," dated September 23, 2009, revealed "... Breach: The unauthorized acquisition, access, use, or disclosure of patient protected health information (PHI) that compromises the security or privacy of the PHI...Medical information: any individually identifiable information, in electronic or physical form, in possession of or derived from a provider of health care, health care service..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: SQ7011.01