EISENHOWER MEDICAL CENTER

Report ID: VJFH11, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to ensure the correct discharge instructions from the Emergency Room (ER) were given to Patient A. Patient A received Patient B's discharge instructions. This failure resulted in the unauthorized disclosure of Patient B's Protected Health Information (PHI), which created the potential for unauthorized use.Findings:On December 14, 2011, at 10:30 a.m., an unannounced visit was made to the facility to investigate a breach of PHI.On December 14, 2011, at 10:40 a.m., the Information Privacy Officer was interviewed. The Officer stated, on November 10, 2011, Patient A was discharged from the ER with several patients. A staff member gave discharge instructions for Patient B to Patient A. Patient A was walking out of the ER and looked at the instructions. The discharge instructions contained Patient B's name, medical record number, account number, and discharge instructions. Patient A immediately returned the instructions and obtained her discharge instructions.On December 14, 2011, the facility policy and procedure titled, "Information Privacy," was reviewed. The policy revealed, "...Will take all necessary steps to avoid unauthorized or unlawful access, use or disclosure of protected health information and to mitigate any harmful effect that is known...of an unauthorized or unlawful access, use or disclosure of protected health information..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280