Loss of personal health information due to theft of two records from a staff member’s vehicle.
Resolved through informal resolution. The health information custodian revised its privacy protocol to ensure that records of personal health information be in the custody and control of the staff member at all times.
The health information custodian fulfilled the notification requirement by way of verbal and written notification to the two affected individuals.
