Ronald E. Rosenbaum DMD, PA

Ronald E. Rosenbaum, DMD, PA, the covered entity (CE), reported that it impermissibly disclosed protected health information (PHI) when it notified affected individuals of a previous breach incident using postcards. This breach affected 1,522 individuals. The PHI involved included names, addresses, and treatment information. OCR provided technical assistance to the CE regarding breach notification, impermissible disclosures, and the definition of a breach. As a result of OCR’s investigation, the CE revised its breach notification policy, and its staff members participated in comprehensive HIPAA training. The covered entity notified affected individuals, OCR, and the media of this breach incident. OCR obtained assurances that the CE implemented the corrective actions noted above.