KINDRED HOSPITAL - ONTARIO

Report ID: I5XX11, California Department of Public Health

Reported Entity: KINDRED HOSPITAL ONTARIO

Issue:

Based on interview and record review, the facility failed to protect Patient A's medical information. This breach caused Patient A's protected health care information to be released.Findings:During an interview with the acute care hospital's Chief Executive Officer (CEO) on 5/14/12 at approximately 4:55, she stated, "The clinical liaison working for another healthcare company misdialed the intended recipient's fax number, and the fax went to a local business."The CEO also stated, "The fax contained the face sheet."The documentation stipulated the face sheet included the following healthcare information:a. Patient A's name.b. Address.c. Birth date.d. Marital status.e. Medical record number.f. Physician's name.g. Next of kin information.h. Medicare and private insurance numbers.i. Last 4 digits of the social security number.The policy and procedure titled "Transmission and Receipt of Protected Health Information Via Fax" with effective date 3/1997 indicated, under Policy #3: "Medical information may be faxed only for patient care purposes. The fax cover sheet and transmission confirmation printouts are to be maintained with the information sent in the patient record." The procedure for misdirected fax included, "Any misdirected FAX is a potential risk for breach of confidentiality. Act immediately to rectify the situation."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights