Canon Business Process Services

Canon Business Process Services, the business associate (BA), reported that an employee inadvertently mailed the protected health information (PHI) of 1,625 individuals to the wrong recipients. The PHI involved included names, health insurance information, claims information, and other treatment information. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect its sensitive data. All staff were retrained.