UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

Issue: See Tags A-0018, A-0019, and E-1953.

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review, the hospital failed to protect Patient 1's confidential records, when his discharge summary was given to another patient who was not authorized to receive Patient 1's protected health information, and Patients 2 through 13…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review the hospital failed to notify the California Department of Public Health (CDPH), within the required five business days, that personal health information (PHI) for Patient 1 had been incorrectly disclosed to a person(s) who…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on interview and record review the hospital failed to notify the Patient 1 within the required five business days, that personal health information (PHI) for Patient 1 had been incorrectly disclosed to a person(s) who had no authority and…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: Based on the interview and record review the facility failed to protect patient personal information when a patient's consult was inadvertently faxed to an incorrect healthcare provider.Findings:During an interview on 1/28/14, at 9:00 AM, the Manager of Accreditation and Licensing…

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Issue: The facility failed to notify patient of the breach of his/her medical information within the required five business days after discovery. The facility became aware of the medical information breach on 11/26/13 but did not notify patient until 12/5/13.

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach

Issue: Based on interview and record review the facility failed to safeguard the medical record information for Patient 2 were faxed to the wrong providers in error. These failures resulted in the breach of the protected health information (PHI) for Patient…

Outcome: Deficiency cited by the California Department of Public Health: Medical Record Availability

Issue: Based on interview and record review the facility failed to provide confidential treatment for protected health information (PHI) for Patient 2 whose patient consult letter was faxed to the wrong healthcare provider.Findings:In an interview on 1/15/14 at 1:00 PM, Privacy…

Outcome: Deficiency cited by the California Department of Public Health: Patients' Rights

Issue: Based on interview and record review the facility failed to inform the patient of the unauthorized access of patient's medical information no later than five business days after the unauthorized access of the information.Findings:In an interview on 1/15/14 at 1:00…

Outcome: Deficiency cited by the California Department of Public Health: Medical Breach

Issue: Data not available.

Outcome: Deficiency cited by the California Department of Public Health: Health & Safety Code 1280