US Rocky Mountain Spine Clinic 2013 Misuse (Q16231)

From Open Risk Manual
A data breach risk event
Language Label Description Also known as
English
US Rocky Mountain Spine Clinic 2013 Misuse
A data breach risk event

    Statements

    0 references
    January 2013
    0 references
    A Denver-area spine clinic says it has fired an employee in its billing department who improperly emailed some patients protected information to her personal account, but it doesnt appear anyones personal information is at risk. Rocky Mountain Spine Clinic in Lone Tree said Wednesday that it fired the employee after the information technology department noticed she sent protected health information of 532 patients from her work email account to her personal account in June in violation of the Health Insurance Portability and Accountability Act, or HIPAA. The clinics privacy officer says the employee told investigators she sent the file so she could work from home. Investigators verified she never opened the file before deleting it from her personal account. (English)