Employee engaged in unauthorized access to personal health information of one individual.
Resolved through informal resolution. The health information custodian immediately removed the employee’s access rights to personal health information. After conducting an investigation, the health information custodian dismissed the employee. The health information custodian also created a project team to review security profiles for employees based on job functions.
The health information custodian notified the affected individual of the breach of his/her personal health information.
