UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

Issue: Based on interview and record review, the hospital failed to protect the confidential information of patients when:1. an insurance verification form was emailed to the wrong patient.2. Post Pregnancy Instructions for two patients were mixed between the two patients and…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the facility failed to maintain the confidentiality of protected health information for five patients when:1. Patient 1's laboratory order was handed to the wrong patient,2. Patient 2's post-operative medication prescription was handed to the…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review, the Hospital failed to ensure the confidentiality of patients' records when they continued to use unencrypted desktop computers (encryption is "the process of encoding messages or information in such a way that only authorized…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to report a breach of confidential medical information within five business days of discovering the breach. Findings:During an interview on 3/5/14, the Manager of Accreditation and Licensing stated that on 1/13/14…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the Hospital failed to ensure the confidentiality of patients' records when they continued to use unencrypted desktop computers (encryption is "the process of encoding messages or information in such a way that only authorized…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review the facility failed to notify the State Agency (SA is the California Department of Public Health -CDPH) of the breach of medical health information in a timely manner for three Patients (Patients 1, 2,…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: CA384340The facility failed to notify Patient 1 of the breach of his/her medical information within the required five business days after discovery. The facility became aware of the medical information breach on 1/7/14 but did not notify Patient 1 until…

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach

Issue: Based on interview and record review the facility failed to safeguard the individually identifiable information of patients when the patient's consult letter for two patients was faxed to the incorrect healthcare provider and one patient's visit summary was handed to…

Outcome: Deficiency cited by the California Department of Public Health: Medical Record Availability

Issue: CDPH verified that facility reported the breaches no later than five days after the unauthorized access was detected by the health facility.

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: See Tag A-0019.

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach