UTMP Surgical Oncology

UTMP Surgical Oncology, the covered entity (CE), reported that an employee mailed the protected health information of 1,310 individuals using postcards that were not protected. The PHI involved included names, addresses, and diagnoses. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE sanctioned the responsible employee and implemented additional administrative safeguards to better protect its PHI.