Henry County Health Department

On October 22, 2016, the covered entity (CE), Henry County Health Department learned that a nurse’s laptop computer and some paper records were stolen from her car inside her locked garage. Approximately 575 individuals were affected by the breach of demographic and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE reprimanded the employee involved in the breach with a record of written warning. Additionally, the CE issued a policy related to safeguarding laptops taken off premises, encrypted all laptops, workstations, and servers and updated its Privacy and Security Policies. OCR obtained documented assurances that the CE implemented the corrective action steps noted above.