UnityPoint Health Affiliated Covered Entity

UnityPoint Health Affiliated Covered Entity (IA) reported to HHS OCR on 2016-05-11 an Unauthorized Access/Disclosure affecting 1,620 individuals. An employee impermissibly accessed PHI stored in Electronic Medical Records, including names, addresses, dates of birth, driver's license information, SSNs, claims, health insurance, diagnoses, lab results, and medication information. The CE sanctioned the employee, notified affected individuals and media, provided credit monitoring, and implemented additional safeguards and staff retraining. OCR obtained assurances of corrective action.