HEMET VALLEY MEDICAL CENTER

Report ID: YODM11, California Department of Public Health

Reported Entity: HEMET VALLEY MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to ensure an unauthorized access to a patient's (Patient 1) PHI (Private Healthcare Information) when Patient 1's information was faxed to a SNF (Skilled Nursing Facility) that Patient 2 was to be transferred to.Findings:On August 13, 2013, a visit was made to the facility for the purpose of investigating a facility reported breach. In an interview with DHIM (Director of Health Information Management) at 12 p.m., she stated, the protocol for transfers is to copy portions of the record and the Continuity of Care document printed from the EMR (Electronic Medical Record). The DHIM further stated, there were two patients, Patient 1 and Patient 2, that were being transferred at the same time, to two different facility's, SNF A and SNF B. The DHIM stated, when SNF A received Patient 1's information instead of Patient 2's information, the SNF called the facility and the information was retrieved by the facility's House Supervisor. SNF A's staff were able to view Patient 1's name, date of birth, gender, home address, telephone number, names of the patient's treating physician's, diagnosis, medications and laboratory test results.Further review of the facility's documents regarding their internal investigation revealed a letter was sent to Patient 1 no later than five working days after the breach to inform the patient of the PHI breach.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280