HEMET VALLEY MEDICAL CENTER

Report ID: RL3511.01, California Department of Public Health

Reported Entity: HEMET VALLEY MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to prevent unauthorized disclosure of protected health information (PHI) for one patient (Patient 1). Portions of Patient 1's medical record was mixed in with Patient 2's medical record, and mailed to the Department of Social Services (DSS). This failure resulted in an unauthorized person having access to Patient 1's PHI and the potential misuse of the information.Findings:On January 5, 2015, the Privacy Officer (PO) was interviewed. The PO stated, on December 13, 2014, the Release of Information Specialist (RIS) prepared copies of Patient 2's medical record authorized to be mailed to the DSS. A portion of Patient 1's medical record (Face Sheet, History and Physical, Operative Report, and Laboratory results), had also been printed, and was included in the envelope addressed to the DSS. An employee at the DSS notified the facility of the error on December 19, 2014.The PO stated there was not an authorization to release Patient 1's medical record to the DSS. The PO stated the RIS failed to double check all the paperwork prior to mailing them out to ensure only the authorized information was released.The PHI contained in Patient 1's medical record included:- Name;- Date of birth;- Social Security number;- Address;- Telephone number;- Medical record number;- Diagnosis (pregnancy);- Medical complaints and treatments provided;- Medical history and physical; and- Laboratory results.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: RA9O11.01