The covered entity (CE), Kaiser Foundation Health Plan, Inc., reported that its business associate (BA) made the protected health information (PHI) of 695 individuals viewable to others. The PHI involved included names and financial information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. Following the breach, the CE implemented additional administrative and technical safeguards to better protect its sensitive data.
