Clinical & Forensic Consultation

The covered entity (CE), Clinical & Forensic Consultation, LLC, dba Thriveworks Bristol, Johnson City, and Knoxville, reported that an employee impermissibly disclosed the email addresses of 1,360 individuals. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the staff member responsible for the breach and retrained all staff members on the proper procedures for safeguarding ePHI. OCR provided the CE with technical assistance regarding the Breach Notification Rule and obtained assurances that the CE implemented the corrective actions noted.