The complainant in this matter was concerned that a public health lab was improperly
disposing of samples that had labels attached containing personal data. When this issue first
came to light, the governmental entity that supervised the lab conducted a thorough review to
determine if personal data had been improperly disclosed to or accessed by any unauthorized
individuals. A review was also conducted by the federal entity with oversight authority over the
lab. Neither review found any evidence of a data breach. The lab also conducted an in-depth
review of their disposal protocols for samples containing personal data. As a result, the lab
updated its policies and implemented strict procedures designed to ensure that any personal
data is removed or fully obscured prior to the secure disposal of lab samples.