A small counseling center received notification that a lapto…
A small counseling center received notification that a laptop that contained PHI was stolen out of a workforce member’s car. Upon investigation, it was determined that information on the workforce member’s laptop contained information on approximately 980 individuals. The laptop that was stolen was password protected; however, it did not contain any encryption software. While no reports of identity theft have been reported, it is unknown what has been done with the laptop or the information on the laptop. How long does this counseling center have to notify these patients of this breach?