NYU Hospitals Center, the covered entity (CE), reported that an employee’s unencrypted laptop computer containing the electronic protected health information (ePHI) of 872 individuals, was stolen. The ePHI involved included names, addresses, birthdates, clinical information, and medications prescribed. In its mitigation efforts, the CE implemented additional administrative safeguards to better protect its ePHI.
