• Loss of personal health information due to theft of a non-password protected laptop computer from a staff member’s home.
  • Resolved through informal resolution. The health information custodian revised its practices so that the laptop would be password protected and locked in the staff member’s home office.
  • The health information custodian fulfilled the notification requirement by way of verbal notification to the affected individuals.