TLC Dental Dania

A laptop computer and 750 paper medical records were stolen from the covered entity (CE), TLC Dental Dania, LLC, during a break-in. The CE reported the theft to the law enforcement. The CE provided timely breach notification to affected individuals and HHS, and posted notice on its website. OCR provided technical assistance to CE about the requirements for media notice. In response to the breach, the CE adopted and implemented new HIPAA policies that addressed the Security, Privacy and Breach Notification Rules. OCR obtained assurances from the CE that its staff would be trained on these new policies.