KINDRED HOSPITAL - ONTARIO

Report ID: K5RH11, California Department of Public Health

Reported Entity: KINDRED HOSPITAL ONTARIO

Issue:

Based on interview and record review, the facility failed to protect Patient A's medical information. This breach caused Patient A's protected health care information to be released.Findings:The facility self reported that the "Centralized business office faxed a packet of paperwork to ... (name of an acute care facility) for a claim review on another patient" however, the facility had inadvertently included a copy of another patient's (Patient A) signed medical release and appeal letters.Review of the letter sent to the patient (Patient A) dated 9/15/11, indicated that the information faxed in error included, Patient A's name, date of birth, last four digits of social security number, insurance account number, dates of treatment, a detailed case history, diagnoses, condition and medical history. During an interview with the Director of Quality Management on 4/6/12 at 3:18 PM, the Director confirmed and stated, "The Centralized Business Office pulled erroneously from the electronic file and had the other patient (Patient A) signed medical release and appeal letters included with the packet of paperwork of another patient."Review of the facility's policy and procedure Titled "Release of Protected Health Information, Policy Number: H-IM 06.001 indicated, "All health information will be treated as confidential and requires a valid consent and/or authorization for release/disclosure ..." and "Any confidential information requested from the record shall be made available only to authorized parties as defined by law or specified by the patient."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights