Adventist Medical Center

Report ID: JI2S11.01, California Department of Public Health

Reported Entity: ADVENTIST MEDICAL CENTER

Issue:

Based on staff interview and administrative document review, the hospital failed to keep Protected Health Information (PHI) for Patient 1 when Patient 1's prescription was given to an unauthorized recipient. This failure resulted in unauthorized access to Patient 1's PHI and the possible abuse of that information. Findings: Refers to CA00379815On 12/26/13 at 9:40 a.m., during an interview, the Privacy Official (PO) stated the Patient 1's PHI was given to Patient 2 on 12/7/13. PO stated the Registered Nurse (RN) was given a prescription by a doctor while she was discharging Patient 2. PO stated the RN did not look at the name on the prescription and handed Patient 2 the prescription which was intended for Patient 1.Patient 1's PHI breached included patient name, date of birth, address, phone number, medical record number, medication name, and prescribing doctor's name. The (Hospital) policy and procedure number 1000.08.09 titled Confidentiality of Protected Health Information dated 5/14/10 indicated: "[Hospital] is committed to protecting the privacy and security of protected health information (PHI)...It is the policy to maintain confidentiality for patients and employees at all times and under all circumstances. ...Breach of patient confidentiality through carelessness is when patient information is unintentionally or carelessly accessed, reviewed, or revealed without a legitimate need to know the patient information."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

2 other violations reported on the same date. Note that other citations may be about the same event: 8F0211.01, WQOO11.01