Langdon Prairie Health

Langdon Prairie Health, the covered entity (CE), reported that it experienced a breach when an employee included the protected health information (PHI) of 1,152 individuals in quality assurance reports in violation of its minimum necessary policy. The PHI involved included medical record numbers, dates of birth, dates of service, health care providers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE amended and clarified its minimum necessary policy, trained staff on the revised policy, and sent out reminders to department directors not to include PHI in quality assurance reports.