• Personal health information of one individual accessed by an unauthorized person.
  • Resolved through informal resolution. The health information custodian purchased privacy screens for computer monitors and the employee involved in the incident was the recipient of disciplinary action.
  • The health information custodian fulfilled the notification requirement by way of verbal notification.