QuadMed

QuadMed reported that employees with access to its occupational health electronic medical records system were able to view medical information that was more than the minimum necessary to complete their job function. OCR determined that QuadMed was not a covered entity and the data was not considered protected health information. This case was therefore, closed.