P2021-ND-191

The Organization received a complaint from a physician about three other physicians. The full complaint was copied to all three physicians on November 18, 2019, without redacting the complaint information about the other physicians. A second breach occurred when the resulting Investigation Report was sent to all three physicians on March 2, 2020, allowing each physician to see the practices of the others, as well as the complaint history and formal undertaking that one of the physicians had with the Organization. The breach was discovered when legal counsel for the three physicians contacted the Organization with concerns about the disclosures of personal information.