IOWAHHS OCRFirst filing
Filed May 11, 2016bd_5645b925d2dad8c5
UnityPoint Health Affiliated Covered Entity (IA) reported to HHS OCR on 2016-05-11 an Unauthorized Access/Disclosure affecting 1,620 individuals. An employee impermissibly accessed PHI stored in Electronic Medical Records, including names, addresses, dates of birth, driver's license information, SSNs, claims, health insurance, diagnoses, lab results, and medication information. The CE sanctioned the employee, notified affected individuals and media, provided credit monitoring, and implemented additional safeguards and staff retraining. OCR obtained assurances of corrective action.
Affected (this filing): 1,620
HHS notified