Loss of personal health information due to theft of a non-password protected USB storage device.
Resolved through informal resolution. The health information custodian reminded staff that personal health information should be stored on the main file and should not be kept for lengthy periods on a USB storage device or laptop computer.
The health information custodian notified some of the affected individuals by way of e-mail, but did not notify those individuals for whom no contact information was available.