Capital Vision Services d/b/a MyEyeDr. (MED Southwest PLLC)

Capital Vision Services, LLC, d/b/a MyEyeDr, the covered entity (CE), reported that documents containing the protected health information (PHI) of 7,983 individuals were found in a public dumpster. The PHI involved included names, addresses, birthdates, Social Security numbers, clinical information, and claims information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE retrained its staff on the proper methods of disposing of documents containing PHI. During our investigation, OCR provided the covered entity with technical assistance regarding the requirements of the Breach Notification Rule. OCR obtained assurances that the CE implemented the corrective actions noted.