KAISER FOUNDATION HOSPITAL - RIVERSIDE

Report ID: QM3511.01, California Department of Public Health

Reported Entity: KAISER FOUNDATION HOSPITAL, RIVERSIDE

Issue:

Based on interview and document review, the facility failed to ensure that Patient A's Protected Health Information (PHI) was not disclosed to any entity not authorized to receive the information. This failed practice resulted in unauthorized access to Patient A's demographic information and Protected Health Information.Findings:On August 12, 2013, at 1 p.m. an interview was conducted with the Compliance Officer and Director of Accreditation and Licensing. The Compliance Officer stated the hospital became aware of the breach on August 5, 2013, when Patient B's wife called to question charges to her husband's account. An investigation revealed that the radiology scheduler did not clear her screen after admitting Patient A. As a result, the radiology scheduler added Patient's A information and Co-payment charges to Patient B's paperwork. The radiology scheduler failed to follow hospital policy and procedures and as a result caused a breach when Patient A's demographic information was disclosed to an entity not authorized to receive it.The facility's policy and procedure titled, "Patient's Rights," was reviewed. The policy indicated the hospital the patients had the right to privacy and confidentiality and the right to have their medical records and private information read only by individuals directly involved in their treatment or in monitoring of its quality and by other individuals only with their written authorization or that of their legally authorized representative..."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: 9BRK11.01