On May 1, 2019, a Wyoming Department of Health (WDOH) workforce member emailed protected health information to a billing vendor, the intended recipient, without first encrypting the email, per WDOH policy. Upon review of the breach report, OCR determined that the incident did not meet the definition of a breach took no further action.
