COMMUNITY REGIONAL MEDICAL CENTER

Report ID: NIXE11, California Department of Public Health

Reported Entity: COMMUNITY REGIONAL MEDICAL CENTER

Issue:

Based on staff interview, facility and administrative document review the facility failed to keep Protected Health Information (PHI) confidential when:1) Patient 1's PHI was mistakenly e-faxed to the wrong payer.2) Patient 2's PHI was mistakenly e-faxed to the wrong payer.These failures placed Patient 1 and 2 's PHI at a potential risk for unauthorized use.Findings:1. On 5/13/14 at 1:15 p.m., during an interview and concurrent clinical record review, Staff 1 stated that on 11/13/12 the PHI of Patient 1 and Patient 2 was mistakenly E-faxed to the wrong payer's by Staff 2 and Staff 3. 2. On 5/13/14 at 1:15 p.m., Staff 1 stated that Patient 1's PHI included the patient names, dates of births, account numbers and clinical assessments.3. On 5/13/14 the facilities policy and procedure number 12108, titled Facsimile Transmission of Health Information contained the following documentation: "Staff members faxing patient information shall take reasonable steps to ensure that the fax transmission is sent to the appropriate destination. Verifying the following information prior to transmission: Name/Date of Birth/Medical Record Number. Repeat back the information, to the requestor, verifying the correct patient information. Fax number of requesting party and repeat the fax number to the requestor. Telephone number and name of requesting party (for later verification/ questions)."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights