This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.

UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

505 PARNASSUS AVE, BOX 0296 SAN FRANCISCO,CA 94143

Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 10, 2014. Also cited in 108 other reports.


Report ID: PIRM11.01, California Department of Public Health

Reported Entity: UCSF MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to protect the patient's right for confidentiality, and prevent unauthorized access to the patient's medical information when a patient's lab flowsheet was inadvertently handed to another patient.Findings:Review of a letter dated March 5, 2014, indicated, "(practice supervisor) am writing to inform you of an incident involving some of your health information. On March 5, 2014, (the facility) determined that your lab flow sheet, reviewed on February 27, 2014, was inadvertently handed to another patient on February 27, 2014. The recipient contacted (the facility) to report the incident and destroyed the document. The document contained your name, medical record number, date of birth, and some health information..."During an interview on 4/10/14 at 9:00 AM, Privacy Officer 1, stated, "the event was known by the facility on 2/28/14. The facility notified California Department of Public Health (CDPH) on 3/6/14. The patient was notified by letter on 3/5/14. The department of the facility involved was "Women's Health" and the personnel involved was Physician 1. The Physician was required to repeat training."Review of facility's "Acknowledgement of Responsibility", revised June 2013, was dated 3/12/14 and was signed by Physician 1.During an interview on 4/10/14 at 9:15 AM, Privacy Officer 1, stated, "Physician1was also required to review the "Statement of Privacy Laws and University Policy" as well as being retrained in HIPAA (Health Insurance Portability and Accountability Act)."

Outcome:

Deficiency cited by the California Department of Public Health: Patients' Rights

Related Reports:

Do you believe your privacy has been violated? Here’s what you can do: