KAISER FOUNDATION HOSP SO SACRAMENTO

Report ID: 9VIQ11.01, California Department of Public Health

Reported Entity: KAISER FOUNDATION HOSP SO SACRAMENTO

Issue:

Based on staff interview and review of electronic health records (EHR) and the facility's policies and procedures, the facility failed to prevent the unauthorized disclosure of Patient 1's protected health information (PHI) when Patient's 1's PHI was placed in the discharge packets for another patient.This failure compromised Patient 1's confidential, sensitive PHI.Findings:A review of the entity reported incident submitted to the Department on 11/20/13 indicated that on 11/13/14 Patient 1's PHI was "inadvertently placed in the discharge package of another patient."During an interview on 9/16/14 at 10 a.m. with the Compliance Program Manager (CPM), she stated that "staff" in the hospital's surgical recovery room had printed out a document from of Patient 1's EHR. The document, which was labelled with Patient 1's name and medical record, included information related to her medical history, current medications, and her dated of birth. A copy of a letter from the facility to Patient 1 indicated it was sent on 11/26/14 to Patient 1's home address. The letter included the details of the PHI that was given to Patient 2 and informed her that her PHI had been shredded by Patient 2.A review of the facility's policy and procedure, dated 7/5/12, titled, "Obligation Regarding Confidentiality," indicated, "Employees are required to protect confidential patient ... from unauthorized access, use or disclosure."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

6 other violations reported on the same date. Note that other citations may be about the same event: 0YM111.01, BX5Y11.01, KR2711.01, N0Z211.01, OFK411.01, TFPW11.01