KAISER FOUNDATION HOSPITAL - RIVERSIDE

Report ID: E4DB11, California Department of Public Health

Reported Entity: KAISER FOUNDATION HOSPITAL, RIVERSIDE

Issue:

Based on interview and record review, the facility failed to ensure the PHI (protected health information) of Patient A remained confidential. This failure resulted in the breach (disclosure) of Patient A's PHI to an individual not authorized to receive the information, (Patient B).Findings:An interview was conducted with the facility's Project Manager (PM), on January 24, 2013, at 4:05 p.m. The PM stated Physician 1, was in the facility's family care center doing rounds on both Patients A and B on December 26, 2012. When the physician finished rounds she gave the Work Status Report which contained Patient A's PHI to Patient B.The PM further stated Patient B returned the PHI to the facility on January 4, 2013, nine days later.A review of Patient A's Work Status Report was conducted. The PHI reflected in the document included Patient A's name, encounter date, diagnosis, surgical intervention, and the physician's name.A review of the facility policy, "Patient Rights (Revision 6/10)," was conducted. The procedure indicated, patients have the rights, "To have their medical record read only by individuals directly involved in their treatment or the monitoring of its quality and by other individuals only on their written authorization or that orf their legally authorized representative."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280