Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 25, 2014. Also cited in 108 other reports.
Report ID: 5XUU11.01, California Department of Public Health
Reported Entity: UCSF MEDICAL CENTER
Issue:
Based on interview and record review, the facility failed to notify the California Department of Public Health (CDPH) within five business days of discovery of a breach of medical information.Findings:During an interview on 4/25/14 at approximately 10:00 AM, the hospital's Privacy Analyst (PA 2) reported that Patient E and Patient F were seen in the Family Health Clinic and a staff person faxed Patient E's medical marijuana prescription and Patient F's Certificate of Medical Necessity for Diabetic Testing Supplies to an incorrect recipient.The original copies of the mis-faxed items were subsequently shredded but PA 2 confirmed that each contained protected health information. PA 2 stated the hospital was notified of this error on 3/26/14. Record review indicated a faxed report to CDPH dated 4/4/14 at 3:12 PM notifying CDPH of the breach. This faxed report was received on day 8 after discovery and was therefore, three days late in notifying CDPH.
Outcome:
Deficiency cited by the California Department of Public Health: Health & Safety Code 1280