Massachusetts Department of Public Health - Tewksbury Hospital reported to HHS on 2017-07-21 an Unauthorized Access/Disclosure affecting 1,176 individuals. A hospital employee impermissibly accessed electronic medical records containing demographic and clinical PHI. The employee resigned prior to sanctions being applied. Remediation included restricting EMR access by role/location, removing sensitive data from patient summary pages, and retraining all staff. OCR reviewed policies and obtained corrective-action assurances.
Affected (this filing): 1,176