Dino-Peds

On May 30, 2018, Dino-Peds, the covered entity (CE), reported that one of its former providers disclosed his patients protected health information (PHI) to the hospital where the provider was moving his services and the hospital used this information to send a patient notification about the provider's move. The PHI included the names and addresses of 1,357 individuals. The provider had proper access to the information when he pulled it from his records, but the CE was unaware that the provider would be instructing the hospital to send a mailing. The CE notified the affected individuals on June 1, 2018. OCR provided the CE with technical assistance regarding the CE’s obligations to safeguard PHI and to ensure it has met its Breach Notification Rule obligations.