Identifying patients in outpatient clinics must be improved, says safety watchdog