Waiting Room Solutions Limited Liability Limited Partnership

Waiting Room Solutions (WRS), the business associate (BA), found a programming error in its IT system where patients’ billing statements were erroneously emailed to other patients. The breach incident affected 701 patients and the protected health information (PHI) involved included names, medical record numbers, addresses, dates of visits, claims information, and billing and financial information. The business associate provided notice to HHS and to all of the affected individuals. Following the breach, WRS corrected the programming error and added additional quality checks to ensure that an incident like this does not occur in the future. OCR obtained assurances that the covered entity implemented the corrective actions noted above.