OHHHS OCRFirst filing
Filed Oct 23, 2015bd_11c61137c7541d31
EnvisionRx (OH), acting as a business associate for Orange-Ulster School District Health Plan, reported to HHS on 2015-10-23 an Unauthorized Access/Disclosure affecting 540 individuals. Due to a processing error, letters were mailed to health plan members that contained other members' PHI — specifically names, medications, and dates of service — via Paper/Films. Remediation included quality control improvements, policy updates, staff training, and an updated BA agreement with the covered entity following OCR investigation.
Affected (this filing): 540
HHS notified