The hospital “failed to handle its patients’ health information with care,” said Attorney General Letitia James. It has pledged to update its policies on third-party tools, ensure deletion of PHI gathered by those tools and boost its privacy safeguards.
