WCAX reports that Vermont's North Country Hospital has received a regulatory citation from the Centers for Medicare and Medicaid Services (CMS) after two employees were found to have inappropriately accessed patient medical records (h/t Becker's Hospital Review).

"Medical information from two patients' records was accessed by two people ... who ... were not involved in the individuals' direct care," Fran Keeler of Vermont's Division of Licensing and Protection told WCAX.

In response to the regulatory citation, Keeler said, the hospital is in the process of implementing an auditing system to alert administrators to any such breaches in the future.

"Our corrective action is the implementation of a system that will do random audits to assure compliance for our patient care records," hospital director of development and community relations Wendy Franklin told WCAX.

The system is expected to be in place by February 15, 2014.

In a separate incident last fall, the hospital notified its patients of a potential data breach when a former employee refused to return a hospital laptop containing patient health information.

Photo courtesy of Shutterstock.