US Rocky Mountain Spine Clinic 2013 Misuse (Q16231)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Rocky Mountain Spine Clinic 2013 Misuse |
A data breach risk event |
Statements
54119DE6-083F-442E-8BD2-BE6A9435E8AA
January 2013
0 references
A Denver-area spine clinic says it has fired an employee in its billing department who improperly emailed some patients protected information to her personal account, but it doesnt appear anyones personal information is at risk. Rocky Mountain Spine Clinic in Lone Tree said Wednesday that it fired the employee after the information technology department noticed she sent protected health information of 532 patients from her work email account to her personal account in June in violation of the Health Insurance Portability and Accountability Act, or HIPAA. The clinics privacy officer says the employee told investigators she sent the file so she could work from home. Investigators verified she never opened the file before deleting it from her personal account. (English)