Tryon Medical Partners, PLLC

The covered entity (CE), Tryon Medical Partners, PLLC, reported that an employee sent the electronic protected health information (ePHI) of 701 individuals to her personal email account. The ePHI involved included names, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement. In its mitigation efforts, the CE implemented new administrative, technical, and security safeguards. All staff were retrained on the HIPAA Rules. In addition, the CE offered complimentary identity theft monitoring services to affected individuals. OCR obtained assurances that the CE implemented the corrective actions noted.