UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

Issue: Data not available.

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to report a breach of protected health information to CDPH within the five day grace period when:1. the breach of Patient 1's information was not reported until the next day after…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review the facility failed to notify the California Department of Public Health (CDPH) within five business days from discovery of a medical information breach and the facility failed to maintain patients' protected health information (PHI)…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to protect personal health information when:1. Patient 1's imaging results were faxed to an incorrect healthcare provider;2. Patient 2's Discharge Summary was included in another patient's Discharge Summary and was given…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of protected health information when:1. Patient 1's consultation letter was faxed to the wrong healthcare provider;2. Patient 2's Disability Insurance application was mailed to an incorrect recipient;3.…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: The facility failed to notify Patient 1 of the breach of his/her medical information within the required five business days after discovery. The facility became aware of the medical information breach on 9/5/14 but did not notify Patient 1 until…

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of protected health information (PHI) when:1. Patient 1's laboratory report was mailed to the wrong healthcare provider;2. Patient 2's Operative report was faxed to the wrong provider;3.…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to report a breach of medical information to the California Department of Public Health within the required five business days when the breach of Patient 1's information was not reported until…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to notify the California Department of Public Health within five business days of discovering that a breach of Patient HB's medical information had occurred.Findings:In an interview on 10/7/14 at approximately 2:15…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: The facility failed to notify Patient 1 of the breach of his/her medical information within the required five business days after discovery. The facility became aware of the medical information breach on 8/26/14 but did not notify Patient 1 until…

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach