Search Privacy Violations, Breaches and Complaints
This database was last updated in December 2015 ago and should only be used as a historical snapshot. More recent data on breaches affecting 500 or more people is available at the U.S. Department of Health and Human Services’ Breach Portal.
UNIVERSITY OF CALIFORNIA SAN FRANCISCO MEDICAL CENTER
Cited by the California Department of Public Health for a violation of California’s Health and Safety Code relating to medical privacy during an inspection that began on April 10, 2014. Also cited in 108 other reports.
Report ID: C3VP11.01, California Department of Public Health
Reported Entity: UCSF MEDICAL CENTER
Issue:
Based on interview and record review, the hospital failed to protect the confidential information of patients when:1. patient's progress notes was faxed to wrong provider;2. patient's After-Visit Summary was mailed to wrong patient; and3. patient's laboratory order was handed to wrong patient.Findings:1. For Complaint CA390796:During an interview on 4/11/14 at 9:55 AM, the Privacy Officer stated the Progress Notes was inadvertently faxed to wrong provider. Privacy Officer stated the wrong provider and the intended recipient provider had the same last name but different first names. Privacy Officer stated the staff did not check the correct first name in the computer system.Review of the Progress Notes dated 3/3/14 indicated patient's name, medical record number, date of birth and medical information of the patient.Patient was notified of this breach of medical information by letter dated 3/7/14.CDPH was notified of this breach of medical information by fax on 3/11/14.2. For Complaint CA390797:During an interview on 4/11/14 at 10:10 AM, the Privacy Officer stated After-Visit Summary of two patients were inadvertently sent by mail to wrong recipients. The Privacy Officer stated the result of their investigations were substantiated but they were not able to identify who mailed the After-Visit Summary. The Privacy Officer stated there were four staff who were possibly made the mistake and all of them had Privacy training annually and was reeducated on the process for mailing.Review of the two patients After-Visit Summary dated 2/11/14 indicated patients' name, medical record number, date of birth and medical information of the patient. Both Patients were notified of the breach of medical information by letters dated 3/10/14.CDPH was notified of this breach of medical information by fax on 3/11/14.3. For Complaint CA390810:During an interview on 4/11/14 at 12:15 PM, the Privacy Officer stated a laboratory order was inadvertently handed to wrong patient when the staff did not verify the right patient before giving it to the patient.Review of the consult letter dated 2/19/14 indicated patient's name, medical record number, date of birth and medical information of the patient. Patient was notified of this breach of medical information by letters dated 3/11/14.CDPH was notified of this breach of medical information by fax on 3/11/14.
Outcome:
Deficiency cited by the California Department of Public Health: Patients' Rights