SANTA CLARA VALLEY MEDICAL CENTER

Report ID: EZJZ11, California Department of Public Health

Reported Entity: SANTA CLARA VALLEY MEDICAL CENTER

Issue:

Based on interview and record review, the hospital failed to implement a patient's right to confidential treatment of their protected information for one sampled patient (2). Findings:During an interview on 3/20/13 at 11:20 a.m., the Compliance and Privacy Officer stated on 8/1/12 there had been a disclosure of Patient 2's confidential information when Patient 1 received Patient 2's lab requisition. The information breach was discovered on 10/26/12 when Patient 1 went to have blood drawn. The phlebotomist identified the lab order requisition presented by Patient 1 belonged to Patient 2.The Privacy Officer stated the patient information on the requisition was protected health information (PHI) which included Patient 2's name, date of birth, medical record number and type of laboratory test ordered.During an interview at 12:30 p.m., the Clinic Assistant Manager stated the policy to ensure PHI was not accidentally disclosed was to check two identifiers to verify no confidential information was released. The Clinic Manager stated they were unable to determine who had given Patient 1 the lab requisition.Record review on 3/21/13 at 1:30 p.m. of the hospital policy "Patient Identification (Verification) dated 11/16/10 indicated: For patient identification and verification, the employee will ask the patient to state at least 2 of the 3 acceptable patient identifiers: patient name, medical record number, or date of birth."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights