Fairfield Medical Center

On July 17, 2019, the CE forwarded mismatched member information to its business associate (BA), causing 1,182 members to receive mail that contained another member’s name and location of service. Following the CE’s internal investigation, the CE provided self-addressed stamp envelopes to facilitate the return of the incorrectly addressed letters, implemented a procedure to ensure that documents will be correctly formatted and saved in a format which cannot be changed, and implemented quality measures to ensure information is correct. The CE also completed execution of a renewal business associate agreement with its vendor. The CE provided breach notification to HHS, affected individuals, and the media. OCR obtained documented assurances that the CE implemented the corrective actions noted above.