Artesia General Hospital, the covered entity (CE), reported that one of its employees impermissibly stored documents containing the protected health information (PHI) of 2,931 individuals at his residence. The PHI involved included names, dates of birth, and diagnoses. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, The CE revised its policies and procedures and retrained staff.
