UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER

Report ID: THEB11.01, California Department of Public Health

Reported Entity: UCSF MEDICAL CENTER

Issue:

Based on interview and record review, the facility failed to maintain the confidentiality of protected health information when such information was stolen out of a locked trunk of a Pediatric resident's vehicle. The bag contained face sheets and sign-outs (paper documents containing PHI (personal health information) for a total of 14 facility patients(patient 1, patient 2, patient 3, patient 4, patient 5, patient 6, patient 7, patient 8, patient 9, patient 10, patient 11, patient 12, patient 13, patient 14.)Findings for CA00398405:During an interview on 7/3/14 at 12:45 PM , Risk Manager stated, "We verified this incident on 4/30/14. We were notified of this incident on 4/25/14. Staff 3 was re-educated."Record review on 7/3/14, at 1:00 PM, indicated, "the information in the face sheets and PHI for 14 patients contained the patient's name with first initial, medical record number, and some health information. It did not contain the social security number or any other personal or financial information for this patient."During an interview on 7/3/14 at 1:15 PM, Risk Manager stated, "the facility was aware of the error on 4/25/14. The notification to the parents or guardians of the patients' whose health information was inadvertently disclosed were notified of the breach of his/her medical information was sent on 5/12/14 by letter from the manager of the department of Pediatrics."

Outcome:

Deficiency cited by the California Department of Public Health: Health & Safety Code 1280

Related Reports:

The report containing this deficiency also includes information about 2 other violations. Note that these may be related to the same event: THEB11.02, THEB11.03

2 other violations reported on the same date. Note that other citations may be about the same event: YOC311.01, YOC311.02