Trinity Village, a senior living community, notified the Maryland AG that staff used an unapproved, non-HIPAA-compliant mobile application to share non-critical PHI (lab/radiology results, condition changes) with one another. One Maryland resident was affected. No third-party access or financial data was compromised. Staff were instructed to stop using the app, communications were deleted, and staff were re-educated on HIPAA compliance.
Affected (this filing): 1