HospitalInspections.org

Based on staff interview and administrative document review, the facility failed to ensure Patient One's Medical Record was treated confidentially when a portion of Patient One's medical record was given to Patient 2. This failure resulted in breach of Patient One's right to confidential treatment of protected health information.

Findings:

On 7/8/10 at 9:43 a.m.,during an interview, the Risk Manager indicated that Patient 1's protected health information, and had informed had been given to Patient 2 on 4/23/10, with other documents from the facility.

On 7/8/10 during Administrative document review, the record indicated that on 5/4/10, Patient 1 was contacted regarding the MR Breech of information by the Privacy Officer.

On 7/8/10 during Administrative document review, it was determined that Patient 1's PHI had been inappropriately given to Patient two by Employee two on 4/23/10.

On 7/8/10 during administrative document review, the facility had been informed by Patient 1 of the receipt of PHI for Patient 2 during a 4/23/10 visit to the facility.

On 7/8/10 during administrative document review the Privacy Officer, spoke with Employee 2 regarding the findings of the investigation. Employee Two, denied knowledge of PHI of Patient 1's PHI in the documents given to Patient Two.

On 7/8/10 during Administrative document review, of the 1/29/2009 facility policy and procedure on "Medical Record Confidentiality" indicated,"....all information that is deemed confidential...shall be kept confidential...not copied or electronically accessed...the facility staff is responsible for identifying who obtains the MR information."