The covered entity (CE), University of Missouri Health Care, reported that a workforce The covered entity (CE), University of Missouri Health Care, reported that a workforce member impermissibly accessed the electronic medical records of 736 individuals. The protected health information involved included names, addresses, dates of birth, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE sanctioned the workforce member. OCR provided technical assistance regarding the HIPAA Rules.
