Special Health Resources for Texas

The covered entity (CE), Special Health Resources for Texas, Inc., reported that its business associate (BA) impermissibly accessed the electronic protected health information (ePHI) of 567 individuals. The BA proceeded to cancel appointments and reschedule them with another BA. The PHI involved included names, addresses, birthdates, diagnoses, and lab results. As a consequence, the CE terminated its relationship with the BA. In its mitigation efforts, the CE implemented additional administrative safeguards to protect its PHI. The CE notified HHS, affected individuals, and the media. OCR obtained assurances that the CE implemented the corrective actions noted.