The U.S. Department of Health and Human Services announced the settlement Thursday, following an investigation by its Office for Civil Rights.
The hospital also agreed to develop a global policy and procedures to protect its patients' information when it is sent off-site, and to train all employees in this regard.
The information that was lost in the incident corresponded to 192 patients associated with infectious diseases, including people with HIV/AIDS.
The documents included patients' names and medical record numbers, and billing forms that contained the name, date of birth, medical record number, health insurance and policy number, diagnosis, and provider name for 66 of those patients.
In a statement, Deborah Adair, the hospital's chief privacy officer, said, "We look forward to taking these steps to further our continued efforts to protect the privacy and security of our patients' medical information."
Source: Siglo21
