P2017-ND-043

On July 29, 2016, the Organization?s Practice Visitor realized a CD storing patient information was missing. The CD had been provided to the Practice Visitor by the affected individual?s physician as part of a quality assurance practice visit. The CD was used in three locations on July 27 and 28, 2016, including the physician?s office, the Practice Visitor?s vehicle (used to transport the CD), and the Practice Visitor?s office. Despite extensive searches, the missing CD has not been recovered. It was not encrypted, nor was the information password protected.