Excerpt from Home Care Blog: (click for entire article)
The Boston Globe and other new papers ran a story about Massachusetts General Hospital agreeing to settle a HIPAA privacy case with OCR and to pay $1,000,000. According to OCR:
The impermissible disclosure of PHI involved the loss of documents consisting of a patient schedule containing names and medical record numbers for a group of 192 patients, and billing encounter forms containing the name, date of birth, medical record number, health insurer and policy number, diagnosis and name of providers for 66 of those patients. These documents were lost on March 9, 2009, when a Mass General employee, while commuting to work, left the documents on the subway train that were never recovered.
Comments