ST HELENA HOSPITAL-CLEARLAKE

Report ID: LOWK11, California Department of Public Health

Reported Entity: ST HELENA HOSPITAL-CLEARLAKE

Issue:

Based on staff interview, investigative report and facility record review, the facility failed to ensure that confidential patient health information (PHI) was protected from unauthorized use for one patient ( Patient 2) when PHI for Patient 2 was inadvertenly faxed to another facility.Findings:On 10/17/14, the California Department of Public Health received a faxed report from the facility that a breach of PHI had occurred on 10/3/14 and the facility became aware of the breach on 10/16/14.During an interview on 11/24/14, at 1:45 p.m., Administrative Staff A stated that when Patient 1 was transferred to another facility, paperwork for Patient 1 was faxed to the other facility and discharge instructions for Patient 2 was inadvertenly included. The discharge instructions included Patient 2's name, diagnosis, education and guidelines for Patient 2's specific medications. Administrative Staff A stated the incident had occurred on 10/3/14, but the Privacy Officer at the other facility was not made aware of the breach until 10/16/14. The Privacy Officer notified Administrative Staff A immediately, and the discharge instructions were shredded. Administrative Staff A stated a letter informing Patient 2 of the breach of PHI was sent 10/16/14.Administrative Staff A stated an investigation was done but it was not known who had faxed the discharge instructions for Patient 2. She stated the manager for the emergency department provided re-education of staff concerning Hippa policies.

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280