You are the Privacy Officer at a health care organization. You received a call from the Risk Manager. She notifies you thai
a Call was received stating that his daughter brought home drawings from day care. On the other side of the pictures were
cardiac reports of patients from your facility. The risk manager asked if the pictures could be picked-up in order to better
understand the situation. The pictures were picked-up. On the opposite side of each picture was a report with a patient's
name and medical record number. It was decided that this was a report that runs periodically in the Emergency
Department (ED) and only some of the reports need to be stored in the medical record. The day care was called and
asked to stop using hospital reports as scrap paper. They were notified that a currier would pick-up ail remaining papers.
- As the privacy officer list the steps you need to take.
- You meet with the ED manager to discuss his/her role in the event. List your recommendations for the manager.
Sample Solution