Allina Health Systems, the covered entity (CE), reported that an employee impermissibly accessed the protected health information (PHI) of 715 individuals. The PHI involved included demographic, financial and clinical information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.
