EISENHOWER MEDICAL CENTER

Report ID: 8W3U11.01, California Department of Public Health

Reported Entity: EISENHOWER MEDICAL CENTER

Issue:

Based on interview and document review, the facility failed for one patient (Patient A), to ensure that (PHI) Protected Health Information was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's demographic information and medical records.Findings:On September 10, 2012, a visit was made to the facility to investigate a breach of PHI.On June 5, 2012, EMC staff discovered that Protected Health Information was given to entity not authorized to receive the information. The admitting clerk printed a label containing Patient A's information and placed it on another patient's admission medical records. The label included Patient A's sex, date of birth, age, name, and medical/account numbers.An interview was conducted with the Compliance Officer on September 10, 2012, 1 p.m. The Compliance Officer stated that on June 5, 2012, it was discovered Protected Health Information was given to entity not authorized to receive the information. The Compliance Officer stated Patient A gave to the facility copies of his medical records that were supposed to be scanned into his permanent records. The facility was to return the medical records once they had been scanned. However, the medical records were then sent to the wrong patient (Patient B). Patient B noticed he had the wrong medical records and called Patient A to notify him of the error. Patient A then notified the facility about the breach. Patient A and B had a very similar name. The Compliance Officer stated the employee who scanned the documents did not verify the address prior to mailing them off. The facility's policy and procedure titled, "HIPPA - Use and Disclosure of Protected Health Information," was reviewed. The policy indicated it was the policy of the facility that the confidentiality of Protected Health Information contained in records and collected pursuant will be protected to the fullest extent and to protect the patient ' s right to privacy, at no time will names or information be shared with any person be shared with any person who does not have a need to know in order to provide patient care.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

16 other violations reported on the same date. Note that other citations may be about the same event: 0B0011.01, 0RFI11.01, 5RJU11.01, 6Y8Z11.01, 78UZ11.01, BJKK11.01, FOJX11.01, HQLM11.01, IBVX11.01, M5TE11.01, OVIN11.01, Q1SN11.01, TOBU11.01, WHRC11.01, WHRC11.02, XRSE11.01