The Psychology Center

The covered entity (CE), The Psychology Center, reported that it used software without a business associate agreement for the completion and e-signature of registration documents, releases of information, and discharge summaries during the COVID-19 pandemic which affected the protected health information (PHI) of 5,314 individuals. The PHI involved included names, addresses, zip codes, dates of birth, Social Security numbers, credit card numbers, and diagnosis and treatment information. In response to the breach, the CE notified the affected individuals and the media. The CE discontinued use of the software in question and provided a copy of its business associate agreement with the vendor whose software it is currently using.