The state Department of Health Services inadvertently revealed the names and addresses of up to 53 Californians enrolled in an AIDS drug assistance program to other enrollees by putting benefit notification letters in the wrong envelopes, officials said Friday.
The letters went out Tuesday to recipients in 16 counties, including Los Angeles, Orange, Riverside and San Diego. The department learned about the mix-up after 12 people in the drug assistance program phoned to say they had received letters addressed to someone else, said health services Director Sandra Shewry.
"The department is committed to a no excuses, zero-tolerance policy regarding the release of sensitive, personal and confidential information," Shewry said. "We take this seriously."
The breach of confidentiality is particularly sensitive after the state Legislature's decision last year to change from an HIV tracking system based on alphanumeric codes to one based on patient names. California had been slow to make the change because of fears that it would compromise patient privacy and deter testing.
Proponents defended the name system by arguing that AIDS, which can take a decade or more to develop after HIV infection, had long been tracked in a confidential database of names.
HIV/AIDS services and advocacy groups said this was the first known breach of that database.
"I would hope this is an anomaly," said Jeff Bailey, director of client services for AIDS Project Los Angeles. "I would not want to give way to panic about this release. It did not go to random citizens of the state, where this information might be shared with someone outside the HIV and AIDS circle."
Lori Yeghiayan, spokeswoman for AIDS Healthcare Foundation, called the breach an "unfortunate error," but not a sign of a systemwide failure.
"From my understanding, it was an individual's error and the individual has been removed," she said.
Shewry said that it appeared that a newly hired clerk thought the letters were form letters and did not realize that each was personally addressed. The clerk put the 54 letters into envelopes and then affixed 54 preprinted mailing labels. The clerk has been reassigned pending completion of the investigation, Shewry said.
"We are investigating and interviewing all the employees who are involved in the chain of command," she said. "This is not how we do business, and we don't intend to have this be the way we do business."
