Loss of personal health information due to theft of a non-password protected laptop computer from a staff member’s home.
Resolved through informal resolution. The health information custodian revised its practices so that the laptop would be password protected and locked in the staff member’s home office.
The health information custodian fulfilled the notification requirement by way of verbal notification to the affected individuals.
