Laguna Honda physicians expose serious health data privacy breaches at DPH

The San Francisco Department of Public Health (DPH) faced serious privacy concerns during a recent meeting, as physicians from Laguna Honda Hospital raised alarms about a significant data breach involving sensitive health information. The meeting, held on July 4, 2025, highlighted the ongoing challenges of maintaining patient confidentiality amid the COVID-19 pandemic.

Dr. Consal, a physician at Laguna Honda, opened the discussion by expressing gratitude for DPH's leadership but emphasized the importance of protecting private health information. She detailed how, in May 2021, physicians discovered that their sensitive health data, including Social Security numbers and personal addresses, was accessible to individuals both within and outside the occupational health department. Despite raising concerns through official channels, Dr. Consal noted that there had been no public acknowledgment or resolution from DPH regarding the breach.

Following her remarks, Dr. Victoria Behrman, another physician at Laguna Honda, corroborated the concerns raised by Dr. Consal. She explained that the transition of occupational health records to the DPH's electronic health record system, Epic, was intended to streamline processes during the pandemic. However, this shift raised immediate privacy issues, as employees found their private medical encounters visible to clerks during COVID screenings. Dr. Behrman reported that despite initial warnings from staff about potential privacy violations, leadership dismissed these concerns.

Both physicians called for DPH to take responsibility for the data breach, urging the department to communicate transparently about the issue and outline steps to protect the privacy of healthcare workers and patients moving forward. The meeting underscored the critical need for robust data protection measures in healthcare settings, especially during public health emergencies.

As the DPH navigates these challenges, the physicians' appeals for accountability and action reflect a growing demand for transparency and integrity in handling sensitive health information. The meeting concluded without immediate resolutions, leaving the future of privacy protections within the department uncertain.