The covered entity (CE), Oklahoma Heart Hospital, LLC, reported that an employee erroneously donated documents that contained the protected health information (PHI) of 1,038 individuals, to a charity. The PHI involved included names, dates of birth, diagnoses, lab results, medications prescribed, and other treatment information. In its mitigation efforts, the CE implemented additional administrative safeguards to better protect it PHI.
