The covered entity’s (CE) business associate (BA) Minuteman Press My Printer Houston, found a printing error that caused the name and address on the envelope to be labeled differently from the enclosed letter. The mailing error affected 11,552 individuals and included demographic information. The CE provided breach notification to HHS, affected individuals, and the media. Because of the breach, the BA determined that it would no longer operate as a BA to the CE or other any other CE. OCR reviewed the BA Agreement and the Notifications provided by the CE. OCR provided technical assistance regarding breach notification and obtained written assurance that the CE would provide additional information in its notifications for any future breaches.
