UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

Issue: Based on interview and record review, the hospital failed to protect the confidentiality of patients health information when:1. Patient MM's consultation letter, containing PHI, was faxed to an incorrect provider;2. Patient LT's Pathology Report, containing PHI, was faxed to the…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to notify the California Department of Public Health regarding the breach of Patient 1's medical information until fifteen (15) days after detection.Findings:During an interview on 9/15/14 at approximately 10:00 AM, the…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of Patient 1's protected health information (PHI) when Patient 1's laboratory results were faxed to a private residence instead of being faxed to Patient 1's physician. This…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of protected health information (PHI) when:1. Patient 1's consultation letter was faxed to an incorrect healthcare provider;2. Patient 2's consultation letter was faxed to the wrong provider;3.…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of patients' protected health information (PHI) when:1. Patient PR's After Visit Summary was handed to the wrong patient;2. Patient MD's insurance authorization form was faxed to an…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to ensure confidentiality of Patient 2's and Patient 3 electronic medical records (EMR), when an employee (Temp 1) accessed these two records without authorization, and subsequently may have made harassing phone…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to ensure confidentiality of Patients 2 and Patient 3's electronic medical records (EMR), when an employee (Temp 1) accessed these two records without authorization, and subsequently made harassing phone calls to…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to protect the confidentiality of Patient 4's protected health information (PHI) when a staff member, Temp 2, intentionally accessed Patient 4's electronic medical record (EMR) without business justification or authorization. This…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Surveyor: Coulton, MaryBased on interview and record review, the hospital failed to protect the confidentiality of Patient 4's protected health information (PHI) when a staff member, Temp 2, intentionally accessed Patient 4's electronic medical record (EMR) without business justification or…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of protected health information when such information for eight patients was faxed to incorrect recipients. This had the potential for misuse of each patients confidential information.Findings:1. CA00406050…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights