UHHS Geauga Medical Center

UHHS Geauga Medical Center (Geauga), the covered entity, discovered that an employee had impermissibly accessed the medical records of 677 individuals. The protected health information (PHI) involved included names, dates of birth, clinical information, diagnosis/conditions, and medications prescribed. Geauga notified all affected individuals and media outlets. As a result of this incident, the employee was terminated and the incident was reported to the Ohio Board of Pharmacy, Ohio Board of Nursing, and local law enforcement. OCR was provided documentation of these corrective actions.