We received a call from a law firm. The law firm had requested the medical records for one of its clients, and we sent t

[answerhappygod]

We received a call from a law firm. The law firm had
requested the medical records for one of its clients, and we sent
those records. At the back of the packet, there were a handful of
pages that belonged to another patient. The ROI team member was
preparing a separate information release for the other patient
around the same time, and a few of the pages were inadvertently
included in the packet to the law firm. The law firm called to
notify us of their receipt of the incorrect pages.
1. What steps would you take as the privacy officer for this
facility to try to prevent similar incidents from happening in the
future? For maximum points, address the actions you would take and
how you would document them. Keep in mind, you may need to prove to
the Office for Civil Rights or a court that you've taken strong
actions to prevent future occurrences, so prepare well thought out
follow-up that you would feel comfortable explaining to a jury or
government were sufficient to prevent the incident from occurring
again.