Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on May 24, 2012. Also cited in 108 other reports.
Report ID: 67N811.01, California Department of Public Health
Reported Entity: UCSF MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to notify the California Department of Public Health (CDPH) of the breach of personal patient health information within the required five business days after discovery.Findings:Patient 1 was seen on the Vascular Neurosurgery Clinic on 4/19/12 for evaluation of seizures. The physician who examined Patient 2 wrote a referral letter containing the patient's name, medical record number, date of birth, diagnoses, results of examination and the medical history.Record review of the referral letter and the fax cover letter indicated Patient 1's referral letter was faxed to a chiropractic clinic. The clinic who received the fax notified the Vascular Neurosurgery Clinic on 4/19/12 that Patient 1 was not their patient and that the fax had been sent to them in error.In an interview on 5/25/12 at 2:30 PM, the Manager of Accreditation, Licensure and Certification stated the information breach happened on 5/2/12 because the summary of Patient 1's visit was sent to the wrong provider. When told the breach happened on 4/19/12 according to the fax cover letter, she stated there was confusion regarding the information about the breach and the wrong dates were on the letter sent to the Department. She acknowledged the information breach was reported late to the Department. A fax letter dated 5/11/12 reporting Patient 1's information breach was received by the California Department of Public Health on 5/14/12.The facility was 18 days late in reporting the information breach to CDPH.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280