Walworth County Department of Health and Human Services

The covered entity (CE), Walworth County Department of Health and Human Services, reported that several employees inadvertently sent the electronic protected health information (ePHI) of 907 individuals to unauthorized parties. The ePHI involved included email addresses and vaccination information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE retrained employees on the proper methods of protecting ePHI. OCR obtained assurances that the CE implemented the corrective actions noted.