The covered entity (CE), Froedtert Health, reported that an employee impermissibly accessed the electronic medical records of 760 individuals. The electronic protected health information (ePHI) involved included names, addresses, dates of birth, diagnoses, lab results, and medication information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Following the breach, the CE sanctioned the responsible employee and implemented additional administrative and technical safeguards to better protect its ePHI.
