Front Range Dermatology Associates

The covered entity (CE), Front Range Dermatology Associates, reported that an employee sent protected health information (PHI) to a former employee. This breach affected 1,070 individuals. The PHI involved included names, clinical information, health insurance information, and financial data. The CE notified OCR, affected individuals, the media, and posted substitute notice on its website. The CE also established a toll free phone number for questions or concerns. In its mitigation efforts, the CE sanctioned the responsible employee and retrained its staff. The CE also implemented additional administrative and security safeguards to better protect its PHI. OCR obtained assurances that the CE implemented the corrective actions noted.