Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER
Cited by the California Department of Public Health for violations of California’s Health and Safety Code relating to medical privacy during an inspection that began on July 11, 2014. Also cited in 108 other reports.
Report ID: FFVK11.02, California Department of Public Health
Reported Entity: UCSF MEDICAL CENTER
Issue:
Based on interview and record review, the hospital failed to protect the confidential information of patients when After-Visit Summaries were handed to wrong patients.Findings:1. CA003399223During an interview on 7/11/14 at 1:30 PM, the hospital's Privacy Officer stated a front office clerk in the Cancer Center handed After-Visit Summary to wrong patient. The Privacy Officer stated the staff did not verify the patient's information before giving it to the patient. The Privacy Officer stated the breach was reported to the facility on 5/16/14. Review of the After-Visit Summary indicated it contained the following protected health information: patient's name, date of birth, medical record number, procedure done and medical information about the visit.Patient was notified of this breach of medical information by letter dated 5/20/14.CDPH was notified of this breach of medical information by fax on 5/21/14.2. CA00400446During an interview on 7/11/14 at 2:15 PM, the hospital's Privacy Officer stated a physician at Otolaryngology handed After-Visit Summary to wrong patient. The Privacy Officer stated the physician did not verify the patient's information before giving it to the patient. The Privacy Officer stated the breach was reported to the facility on 5/22/14. Review of the After-Visit Summary indicated it contained the following protected health information: patient's name, date of birth, medical record number and medical information about the visit.Patient was notified of this breach of medical information by letter dated 5/30/14.CDPH was notified of this breach of medical information by fax on 5/30/14.2. CA00400004During an interview on 7/11/14 at 2:30 PM, the hospital's Privacy Officer stated a staff at Obstetrics/Gynecology Department handed After-Visit Summary to wrong patient. The Privacy Officer stated the staff was holding multiple documents in her hands and did not verify the patient's information before giving it to the patient. The Privacy Officer stated the breach was reported to the facility on 5/21/14. Review of the After-Visit Summary indicated it contained the following protected health information: patient's name, date of birth, medical record number and medical information about the visit.Patient was notified of this breach of medical information by letter dated 5/28/14.CDPH was notified of this breach of medical information by fax on 5/28/14.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights