DOCTORS MEDICAL CENTER

Report ID: H6QH11, California Department of Public Health

Reported Entity: DOCTORS MEDICAL CENTER

Issue:

Based on staff interview, facility and administrative document review, the facility failed to keep Protected Health Information (PHI) confidential when Patient 1's physician discharge order was mistakenly faxed to a private citizen's home. This failure placed Patient 1's PHI at risk for possible unauthorized use.Findings:On 12/22/11 at 10:30 a.m., during a telephone interview, Staff 1 (Privacy Officer) stated on 12/1/11 Staff 2 (Case Manager) mistakenly faxed Patient 1's physician discharge order to a private citizen's home. The intended recipient of the discharge order was a local nursing home according to Staff 1. Staff 1 stated the hospital expectation was the staff's responsibility to ensure PHI was faxed to the intended recipient. On 12/22/11 at 10:35 a.m., Staff 1 stated the order contained Patient 1's name, date or birth, medical record number and account number.The facility policy and procedure number 1.0.0, titled "Privacy Policy Overview" contained the following documentation: "Privacy Policies and Procedures have been established to outline directives relating to the Protected Health Information ("PHI") of Patients. These directives include: Protecting the privacy of the PHI of Patients in accordance with California and federal requirements." The facility policy and procedure number VI-32 titled "Transmission of Medical Records by Facsimile" contained the following documentation: "The sender must verify by telephone the availability of the authorized receiver before beginning transmission."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights