New England Dermatology and Laser Center, P.C.

New England Dermatology and Laser Center, P.C. (NEDLC), a Massachusetts dermatology provider, reported to HHS OCR on 2021-05-11 an improper disposal incident affecting 58,106 individuals. Empty specimen containers bearing patient names, dates of birth, dates of sample collection, and provider names were placed in a publicly accessible dumpster in the parking lot. Breached information was on paper/physical labels. NEDLC paid a $300,640 settlement to OCR and agreed to a corrective action plan to remediate HIPAA Privacy Rule violations.