Substitute Notice for HIPAA Breach Notification

May 30, 2023

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires Henry Mayo Newhall Hospital (Henry Mayo) to notify potentially affected individuals of improper disclosures of Protected Health Information (PHI). A privacy breach was discovered on May 8, 2023, and Henry Mayo notified impacted individuals by mail on May 26, 2023. Approximately two (2) of these notifications were not mailed because there is no known address.
On May 8, 2023, we discovered that a Henry Mayo employee accessed the medical information of some patients without a business need to do so. The PHI disclosed consisted of demographic data (full name, date of birth, medical record and visit numbers) and clinical data (diagnosis, vital signs, narrative clinical notes). We have identified the cause as being due to curiosity. There is no indication that the information was used for any illegal purpose. Nevertheless, in accordance with California and Federal law, we are notifying you.
This message constitutes substitute service for those individuals we attempted to notify but were unable to reach. Unless you were an inpatient at Henry Mayo on May 6, 2023, you are unlikely to be one of the impacted individuals. We sincerely regret this incident occurred and are taking appropriate measures to do everything that we reasonably can to prevent any similar incident in the future, including our continued efforts to counsel and educate the staff.
If you have any questions or believe you may have been one of the individuals with an unknown address, please contact us by phone at 661-200-1265, email at privacyofficer@henrymayo.com or by mail to HIPAA Privacy Officer, 23845 McBean Parkway, Valencia, CA 91355.

For a PDF copy of this notice, click here.