The covered entity (CE), Wyoming Department of Health, reported that an employee inadvertently made the protected health information (PHI) of 164,010 individuals viewable over the Internet. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, and laboratory results. As a result of OCR’s investigation, the CE implemented additional administrative and technical safeguards to better protect sensitive data. All workforce members were retrained on protecting and securing PHI.
