Government Employees Health Association, Inc.

The covered entity (CE), Government Employees Health Association, Inc., reported that a mailing error caused the protected health information (PHI) of approximately 696 members to be mailed to the wrong recipients. The PHI involved included names, addresses, claims information, health insurance information, and other treatment information. The CE notified HHS and the affected individuals. The CE also provided complimentary credit monitoring services. In its mitigation efforts, the CE implemented additional administrative and technical safeguards to better protect its sensitive data. OCR obtained assurances that the CE implemented the corrective actions noted.