norm: rocky mountain spine clinicno LEI · no CIKMax severity: Medium

Canonical registry

Rocky Mountain Spine Clinic

ent_77175f7a60fa6ecb4659c5c7

Compliance scorecard →🔔 Follow entity

Disclosures

1

HHS OCR · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

532

as filed · HHS OCR CO

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Rocky Mountain Spine Clinic
Normalized: rocky mountain spine clinic— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

COHHS OCRas victim2013-07-31
Rocky Mountain Spine Clinic (CO healthcare provider) reported that an employee emailed PHI of approximately 532 patients to her personal email account. The PHI included names, SSNs, insurance numbers/information, procedure descriptions, and treating physicians' names. The clinic notified HHS, affected individuals, and the media; sanctioned the employee; confirmed deletion of the PHI from the employee's personal computer and email; and retrained staff on HIPAA Privacy and Security Rules. OCR obtained the clinic's HIPAA policies and assurances of corrective action.