SAN ANTONIO REGIONAL HOSPITAL

Report ID: 9HV911, California Department of Public Health

Reported Entity: SAN ANTONIO REGIONAL HOSPITAL

Issue:

Based on interview and record review, the facility failed to maintain confidential the protected health information (PHI) of Patient A when it was faxed to the wrong recipient. This resulted in a breach of PHI.FindingsOn 2/19/12 at approximately 10:30 AM, an unannounced visit was made to the facility to investigate a self reported incident of Patient A's PHI being faxed to the wrong recipient.During an interview with the privacy officer at 10:40 AM, he reviewed the records and explained that an outside case manager had faxed Patient A's PHI to another external agency. According to the privacy officer the employee involved had dialed her own cell number along with the 1-800 resulting in the error. The patient was notified of the error.A review of the documents sent in error, indicated that Patient A's name, address, phone number, family's phone number, her Social Security number, insurance information, doctor's information and diagnoses were on the paperwork. Her history and physical also gave insight into her social history as well as her medical demographics. A review of the facility policy and procedure for faxing protocols was reviewed and indicated that the employee should have verified the fax number before sending the information.The privacy officer reviewed the documents sent containing Patient A's PHI and confirmed that a breach had occurred.

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights