The Lowell General Hospital (MA) reported to HHS on 2017-11-10 an Unauthorized Access/Disclosure affecting 769 individuals. An employee impermissibly accessed the PHI of 769 individuals, including demographic and clinical information stored in Electronic Medical Records. The CE notified HHS, affected individuals, and the media. The employee was sanctioned, and the CE updated its policies to detect inappropriate access. OCR reviewed CE policies and found compliance with the Privacy and Security Rules.
Affected (this filing): 769