DEPARTMENT OF HEALTH 8: HUMAN RVICES OFFICE OF THE SECRETARY Voice - {312) 836-2359 TDD . {312) 353-5693 (FAX) - (312) 336-180? mm November 12, 2013 {bh?ixibimicl privacy Of?cer Marsh?eld Clinic 1000 North Oak Ave. Marsh?eld, WI 54499 . Marsh?eld Clinic OCR Transaction Number: 1 1-128705 Dearlibii i( ii 1 Re: On June 2011, the U.S. Department ofHeal Civil Rights (OCR), received a complaint ?led alleging that Marsh?eld Clinic (Marsh?eld), Individually Identi?able Health Information an of Electronic Protected Health Information (45 Of?ce for Civil?Rights, Region 233 N. Michigan Ave, Suite 240 Chicago, IL 60601 and Human Services (HHS), Of?ce for vro ate the Federal Standards for Privacy of 31' the Security Standards for the Protection F.R. Parts 160 and 164, Subparts A, C, and the complainant, and E, the Privacy and Security Rules). Speci?cal] {bli?ixibliihci alleges that I an employee of Marsh?eld, accessed {bit?iibitiitci between January 26, 2009 and January 15, 2011 OCR enforces the Privacy, Security, and Breach rights laws which prohibit discrimination in the because of race, color, national origin, disability and religion. OCR has reviewed the matter raised in the com Marsh?eld of this complaint. On March 201 OCR, along with supporting documentation. In i alle ation as alle ed. In its response, Marsh?el {biterbitrrci -d access med was terminated, and refresher training on Privacy and Security policies and procedures. We have reviewed the complaint, and Marsh?eld? OCR will not ?u'ther investigate these allegations. medical record a total of 52 times 'thout a legitimate business purpose. oti?cation Rules, and also Federal civil livery of health and human services ge, and under certain circumstances, sex 'nt. On February 28, 2013, OCR noti?ed arsh?eld provided a written response to responses, Marsh?eld acknowledged the vestigated the matter and determined that record as alleged. As a result, provided to Marsh?eld system-wide staff responses, and have detennined that Therefore, OCR is closing this complaint with no further action, effective the date of this letter. determination as stated in this applies on] were reviewed by OCR. Under the Freedom of Information Act, we ma},r information about this case upon request by the request, we will make every effort, as permitted individuals or that, if released, could constitute privacy. Sir El to the allegations in this complaint that required to release this letter and other (kiblic. In the event OCR receives such a l: law, to protect information that identi?es clearly unwarranted invasion of personal merely, I 6: Ce] Reg] ans/W Ste H. Davis onal Manager