HospitalInspections.org

Based on interview and record review, the facility failed to protect Patient A's medical information. This resulted in the unauthorized release of Patient A's protected health care information.
Findings:

During an interview with the Privacy officer on 5/2/12 at 9:00 AM, she stated, "An EKG was sent to the printer in the infusion center. Then the infusion nurse faxed patient A's information with Patient B's information. she should have identified each paper prior to faxing them."

The Protected Health Information of Patient A's that was released included:
a. Name
c. Date Of Birth
d. Date of Service
e. Attending physicians name
f. Diagnosis

The policy and procedure titled "Sending Protected Health Information by Fax" dated 4/9/10, indicated, "Policy:
4. Multi use Fax machines may only be put in service if an alarm is set to notify operators of a fax being received."