EISENHOWER MEDICAL CENTER

Report ID: BRU011.01, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to prevent unauthorized disclosure of protected health information (PHI) when a case management employee faxed the summary for one patient (Patient 1) to a fax number belonging to a private individual. This failed practice resulted in the potential for physical, emotional, and financial harm to the patient and his wife.Findings:During an interview with the facility Privacy Officer (PO) on May 20, 2014, at 10:05 a.m., the PO stated on May 8, 2014, a case management employee was faxing a summary of Patient 1's hospital stay to a healthcare agency to arrange continued care after his discharge. The PO stated the employee dialed the incorrect fax number, and the information was sent to a private individual's fax machine.The documents that were faxed were reviewed on May 20, 2014. The documents contained the following PHI:1. Patient name;2. Age;3. Sex;4. Date of birth;5. Race;6. Ethnicity;7. Address;8. Telephone number;9. Social security number;10. Account number;11. Medical record number;12. Insurance information;13. Physician's name;14. Diagnoses;15. Spouse's name;16. Spouse's address;17. Spouse's phone number;18. History and physical;19. Physician's orders;20. Laboratory results;21. X-ray results;22. Medications;23. Weight; and,24. Vital signs.Failure to verify the correct fax number resulted in disclosure of Patient 1's PHI to an unauthorized individual, and the potential for harm to him and his wife.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: URCZ11.01