Roswell Park Comprehensive Cancer Center (NY) reported to HHS on 2019-10-18 an Unauthorized Access/Disclosure affecting 584 individuals. An employee impermissibly accessed ePHI stored in Electronic Medical Records, including names, birthdates, diagnoses, treatment information, and medications prescribed. The CE sanctioned the responsible employee, revised its policies and procedures, and OCR obtained assurances of corrective action. No business associate was involved.
Affected (this filing): 584