Lahey Hospital and Medical Center, Burlington, mass., will pay $850,000 and implement a robust corrective action plan in a HIPAA settlement stemming from the 2011 theft of a laptop, according to an article on the Fierce Healthcare website.
A laptop used to operate a portable CT scanner was stolenfrom an unlocked treatment room. The hard drive contained the protected health information of 599 patients.
An investigation found issues including:
• Failure to physically safeguard a workstation that accessed ePHI
• Failure to implement and maintain policies and procedures to safeguard ePHI maintained on workstations used with diagnostic/laboratory equipment