Receiving faxes with patient info from a medical center

  • 0
  • 1
  • Question
  • Updated 12 months ago
  • Doesn't Need an Answer
  • (Edited)
The past couple of weeks, I've been receiving medical faxes with very personal medical information on them. I've called the medical facility that the faxes are coming from to let them know, and they said those were their patients, and to destroy the faxes, but I'm still getting them. My husband said I should check that it's not a problem within RingCentral, but I don't see how it could be since they would be actually dialing my number to send the faxes. It's a violation of HIPAA for then to be sending the faxes to me, but I did make the effort to let them know, and I assumed that the medical center would be concerned enough of HIPAA violations to take care of them problem. Has anyone else had something like this happen to them?
Photo of Deborah Leaverton

Deborah Leaverton

  • 124 Points 100 badge 2x thumb
  • concerned

Posted 12 months ago

  • 0
  • 1
Photo of Danno

Danno, Champion

  • 26,484 Points 20k badge 2x thumb
Does the fax header or cover sheet show your number or another number?
Photo of Mike

Mike, Official Rep

  • 92,054 Points 50k badge 2x thumb
I've never heard of this before, or at least I've never heard of the medical facility not wanting to protect themselves.  If you can tell what number the faxes are coming from can you email it to community.support@ringcentral.com?  

Mike 
Photo of Deborah Leaverton

Deborah Leaverton

  • 124 Points 100 badge 2x thumb
No, it just has the medical center information at the top. When I called the medical center, someone said that when their machine is full, it send a return fax to alternate numbers, and they could remove my number, but obviously that hasn't happened. I'm not sure why my number would be there in the first place? I've had my number for a long, long time, and this has only started happening in the past 2-3 weeks. Some of the faxes have had social security numbers, and all have had diagnosis, name, address, birth date, phone number, etc of the patient. 
Photo of Danno

Danno, Champion

  • 25,700 Points 20k badge 2x thumb
You could always just block their number.
Photo of Deborah Leaverton

Deborah Leaverton

  • 124 Points 100 badge 2x thumb
Even so, who else are they sending the faxes to that have no business receiving them? It's a HIPAA violation, and when I called, they were concerned, and told me to destroy the faxes and they would fix the problem. I guess they didn't fix it...
Photo of TRANSPORTATION

TRANSPORTATION

  • 80 Points 75 badge 2x thumb
By law, they are suppose to submit an inadvertent disclosure tracking form to the the subject of the PHI. There are huge fines for violating this.
Photo of Deborah Leaverton

Deborah Leaverton

  • 124 Points 100 badge 2x thumb
Sure, Mike, I will do that. I did send a report last week to the Office of Civil Rights because of the HIPAA laws, so the patients could be notified that their records had gone to someone else without their permission.
Photo of Brandon

Brandon, Champion

  • 20,396 Points 20k badge 2x thumb
I have had emails/faxes/voice messages/snail mail sent to me by accident with other peoples personal information.  You are doing the right thing by notifying the sender, but besides that there is nothing you can really do or need to do in my opinion.  
Photo of Jay Nichols

Jay Nichols

  • 662 Points 500 badge 2x thumb
Call the facility and ask for the IT department.  Then ask for the name of the CIO (chief information officer  make sure you get a name) then ask to talk to that person.  I run a medical clinic where we get missent faxes periodically.  Most facilities will bend over backwards to fix the problem, but I had one VERY large hospital blow me off for 4 months.  It did take a call to the CIO and a threat to report them to CMS for HIPAA violations. That finally worked.
Photo of Chris Duquette

Chris Duquette, Champion

  • 14,544 Points 10k badge 2x thumb
Blocking the number as Danno said is the best idea otherwise youll be sifting through private info up to your eyeballs and then who knows someone could then try and hold you accountable for having even received the information even though it was not your mistake in the least. try and get in touch with the CIO and IT department as Jay has suggested and then make sure to
A. record that call
B. make sure you tell them when you started blocking the number so you get it out there that you arent getting the info anymore.

Seems like that should just about handle it. Good luck!!!