RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Report ID: YY1P11.01, California Department of Public Health

Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to ensure staff sent Patient A's Newborn Screening Report with the correct facility code in order to ensure the results were returned to the reporting facility. This failure resulted in the unauthorized disclosure of Patient A's protected health information (PHI), which created the potential for unauthorized use.Findings:On July 10, 2012, at 10:20 a.m., an unannounced visit was made to the facility to investigate a breach of PHI.On July 10, 2012, at 10:30 a.m., the Director of Compliance was interviewed. The Director stated Patient A's newborn screening report was sent to the State with the incorrect facility code. The report contained lab tests, gender, medical record number, and the address and telephone number for Patient A's mother. The State mailed the report to an incorrect facility with the code provided on the paperwork.On July 10, 2012, the facility policy and procedure titled, "Patient Privacy, Confidentiality, Medical Records, and Access to, or Release or Disclosure of, Patient Information," was reviewed. The policy indicated, "Purpose To protect patients' rights to privacy and security of their healthcare information and to establish the criteria and the methods by which patient healthcare information may be accessed, used, released, or disclosed..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: RWD911.01