Encompass Family and internal medicine group

Encompass Family and Internal Medicine Group, the covered entity (CE), reported that one of its providers impermissibly accessed and disclosed the protected health information (PHI) of 507 individuals. The PHI involved included names, gender, phone numbers, addresses, dates of birth, and other demographic information. The CE notified HHS, affected individuals, and local law enforcement. In its mitigation efforts, the CE sanctioned the responsible provider and implemented additional technical safeguards to better protect its PHI. OCR provided the CE with technical assistance regarding the Breach Notification Rule and its obligations to safeguard PHI.