Lakeview Clinic

Lakeview Clinic, the covered entity (CE), reported that an employee impermissibly emailed the protected health information (PHI) of 624 individuals to a personal email account. The PHI involved included names, birthdates, health insurance information, and financial and claims information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE sanctioned the workforce member and implemented new administrative safeguards.