Personal health information of one individual accessed by an unauthorized person.
Resolved through informal resolution. The health information custodian purchased privacy screens for computer monitors and the employee involved in the incident was the recipient of disciplinary action.
The health information custodian fulfilled the notification requirement by way of verbal notification.
