RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Report ID: U7Z011.01, California Department of Public Health

Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to protect Patient 1's protected health information (PHI) from unauthorized disclosure. Patient 1's discharge instructions were given to the wrong patient (Patient 2). This resulted in the potential for misuse of Patient 1's PHI. Findings:On April 15, 2014, at 9:30 a.m., the Administrative Services Officer (ASO) was interviewed. The ASO stated Patient 1(and Patient 2 were both seen in the Emergency Department (ED) on February 22, 2014, around the same time. The ASO stated Patient 2 was handed Patient 1's discharge paperwork when he was discharged from the ED. The error was discovered shortly after Patient 2 left the ED.The discharge instructions for Patient 1 was reviewed. The discharge instructions contained Patient 1's name, date of birth, medical record number, and account number.The facility policy and procedure titled "Patient Identification" dated May 23, 2012, indicated "Use at least two patient identifiers when providing care, treatment, or other services... Procedures requiring patient identifiers.. registration, transportation, and discharge of patients..."The facility policy and procedure titled "Patient Privacy: HIPPA" dated August 27, 2013, indicated "Maintain the highest level of confidentiality for all protected health information... Protected Health Information (PHI) is defined as verbal, written, or electronic information... Such as name..medical record number... information about the patient's medical condition... diagnostics, testing, treatment..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: UIXK11.01