RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Report ID: UIXK11.01, California Department of Public Health

Reported Entity: RIVERSIDE COUNTY REGIONAL MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to protect Patient 1's protected health information (PHI) from unauthorized disclosure. Patient 1's HIV (Human Immunodeficiency Virus), test results were released without patient authorization.Findings:On April 15, 2014, at 9:30 a.m., the Administrative Services Officer (ASO) was interviewed. The ASO stated a subpoena request for Patient 1's medical record was received by the facility. When the person from the attorney office came to the facility, on January 2, 2014, the entire record was given for them to copy, including "sensitive information." She stated the staff ensured the correct medical record was furnished, however, they did not ensure sensitive information was not disclosed. The ASO stated information, such as HIV test results, should have been removed from the medical record prior to allowing anyone to make a copy. The ASO stated the error was not realized until February 19, 2014, when the copy service notified them. The facility policy and procedure titled, "Release of Information," dated September 2013, was reviewed. the policy indicated, "If the patient does not specifically allow for HIV to be released but does allow for other information, make sure that nothing stating HIV testing or its outcome is released."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

1 other violation reported on the same date. Note that other citations may be about the same event: U7Z011.01