PeaceHealth Southwest Medical Center (WA) reported to HHS on 2017-09-19 an Unauthorized Access/Disclosure affecting 1,969 individuals. A nurse impermissibly accessed patients' electronic medical records without a business reason. Breached PHI included demographic and clinical information. The CE revoked the employee's access, audited records, sanctioned the employee, reported them to the WA State Board of Nursing, and implemented new technical safeguards. OCR obtained assurances of corrective action completion.
Affected (this filing): 1,969