UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

Issue: Based on interview and record review the facility failed to maintain the confidentiality of Protected Health Information (PHI) for two sampled patients (Patient 1 and Patient 2) when:1. Patient 1's clinical records were inadvertently faxed to a private individual.2. Patient…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the facility failed to notify the California Department of Public Health (CDPH) within five business days of discovery of a breach of medical information.Findings:During an interview on 4/25/14 at approximately 10:00 AM, the hospital's…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of protected health information when such information for eight patients was faxed to incorrect recipients. This had the potential for misuse of each patients confidential information.Findings:1. CA00392702…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to maintain the confidentiality of protected health information when such information, for 7 patients, was either faxed, mailed, or handed to an incorrect patient. This had the potential for misuse of…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the Hospital failed to ensure the confidentiality of patients' records when they continued to use unencrypted desktop computers and the staff were able to use personal computing devices which were not encrypted (encryption is…

Outcome: Deficiency cited by the California Department of Public Health: PATIENT RIGHTS: CONFIDENTIALITY OF RECORDS

Issue: Based on interview and record review, the facility failed to protect the patient's right for confidentiality, and prevent unauthorized access to the patient's medical information when a patient's lab flowsheet was inadvertently handed to another patient.Findings:Review of a letter dated…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the hospital failed to protect the confidential information of patients when:1. patient's progress notes was faxed to wrong provider;2. patient's After-Visit Summary was mailed to wrong patient; and3. patient's laboratory order was handed to…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: The facility failed to notify Patient 1 of the breach of his medical information within the required five business days after discovery. The facility became aware of the medical information breach on 1/2/14 but did not notify Patient 1 until…

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach

Issue: Based on interview and record review the facility failed to protect confidential information of patients when consult letter of patients were sent to wrong healthcare providers.Findings:1. For Complaint CA387889:During an interview on 4/1/14 at 9:17 AM, the Privacy Officer stated…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the facility failed to notify the California Department of Public Health (CDPH) of the breach of personal patient health information within the required five business days after discovery.Findings:During an interview on 4/1/14 at 9:00…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280