ORANGE COUNTY GLOBAL MEDICAL CENTER

Report ID: 2O5L11, California Department of Public Health

Reported Entity: WESTERN MEDICAL CENTER SANTA ANA

Issue:

This Statute was NOT MET as evidenced by:Based on staff interview and review of hospital investigatory documentation, the hospital failed to prevent the unauthorized access to patients' medical information. This resulted in each patient's protected health information being available to persons without the patient's permission.Findings:1. During interview on 7/24/12, the Director of Medical Records stated an employee was authorized to access medical record information regarding only PKU (phenylketonuria) tests for ten patients (Patients 2 through 11). However, the employee accessed and reviewed documents from the entire medical records of the ten patients. In addition, the employee accessed and reviewed the insurance card, face sheet, and photo identification card of an additional patient (Patient 1). Review of the hospital investigatory documentation showed the hospital became aware of the unauthorized disclosures on 4/3/12. The employee was suspended and then terminated on 4/5/12. 2. During interview on 7/24/12, the Director of Medical Records stated the hospital had a contracted blood services provider. Review of the hospital's investigatory documentation showed an employee of the blood services provider had information on a portable hard drive on his desk that contained Patient 12's medical information. The documentation stated that even though the employee may have needed the patient information to perform his job, he did not need to keep the information on his external hard drive.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280