Adventist Medical Center

Report ID: EUFD11, California Department of Public Health

Reported Entity: ADVENTIST MEDICAL CENTER

Issue:

Based on staff interview, clinical record and administrative document review, the facility failed to keep confidential Patient 1's protected health information (PHI) when Patient 1's discharge instructions were given to Patient 2 in error. This failure placed Patient 1's PHI at potential risk for unauthorized use.Findings: On 1/2/14 at 10 a.m. during a concurrent telephone interview and clinical record review, the facility's Privacy Officer stated that on 9/7/12, a patient was discharged from the Emergency Department with discharge instructions for another patient. The error was found when a Medical Records staff member noticed Patient 1's discharge paperwork was signed by another patient. The Privacy Officer (PO) contacted Patient 2 who verified she had received discharge instructions for someone else. Patient 2 indicated she had thrown the papers away.On 1/2/14 at 10:15 a.m., during a telephone conversation, the PO stated Patient 1 had been notified that the discharge instructions had been given to the another Patient and revealed the following information PHI: Patient 1's name, date of birth, age, sex, account number, telephone number, and diagnosis. A copy of the letter was provided.On 1/16/14 a review of the facility's policy and procedure was conducted: "No. 1000.08.09" titled, "Confidentiality of Protected Health Information...Policy Summary/Intent: ...this policy is to provide guidelines to ensure the confidentiality and integrity of patient information...B. Breach of Patient Confidentiality...1. "Carelessness"...a breach that occurs when...patient information is...carelessly...revealed to others without a legitimate need to know..."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights