SHASTA REGIONAL MEDICAL CENTER

Report ID: 7YG311.01, California Department of Public Health

Reported Entity: SHASTA REGIONAL MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to safeguard confidential health information for one patient (Patient 1) when Monitor Tech 2 accessed the medical record and shared confidential information with Community Member 3. This failure resulted in the unauthorized disclosure of confidential health information outside the facility. Findings:On 4/29/13, the California Department of Public Health was notified that Monitor Tech 2 had accessed Patient 1's medical record, not related to the duties of her position, and then shared this information with Community Member 3, who was a mutual friend of Patient 1 and Monitor Tech 2.In an interview on 10/8/13 at 1:30 pm, the Director of Performance Improvement stated that Patient 1 had informed the hospital that Monitor Tech 2 had accessed her medical record from a hospital admission on 3/14 to 3/17/11. Community Member 3 told Patient 1 that Monitor Tech 2 had been discussing Patient 1's lab results from her hospital admission including her diagnosis of hepatitis. Patient 1 stated that Monitor Tech 2 told Community Member 3 that she should wipe everything down with bleach if Patient 1 visited her home. During a an interview with Patient 1 on 10/15/13 at 2:12 pm, Patient 1 stated that Community Member 3 had informed her that Monitor Tech 2 had disclosed to her that Patient 1 had hepatitis. Patient 1 further stated that Community Member 3 was told by Monitor Tech 2 to be careful and to use bleach on the toilet if Patient 1 ever visited. Patient 1 stated that she a felt humiliated, embarrassment and very upset when she heard that her medical information had been accessed and shared inappropriatelyThe hospital's employee agreement, titled, "Workforce Confidentiality Agreement," signed by Monitor Tech 2 on 3/3/10, read, any access, attempted access, or disclosure of information in violation of law or Shasta Regional Medical Center...will be considered a breach of confidentiality..."In an concurrent interview on 10/8/13 at 1:45 pm with the Director of Human Resources (DHR) and the Nursing Manager, they both stated that during their investigation into the alleged breach of medical information, Monitor Tech 2 admitted to accessing Patient 1's medical information, outside of the duties of her job.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: R6ZF11.01