Reporting a Possible Privacy Breach


TO REPORT SUSPECTED or ACTUAL BREACHES and INCIDENTS    (IU Policy ISPP-26)

Potential loss of PHI can be caused by any of the following but are not limited to:

  • suspected or actual incidents of loss, inappropriate disclosure, or inappropriate exposure of information;
  • suspected or actual weaknesses in authentication or physical safeguards you detect;
  • abnormal unsuccessful login attempts, scans;
  • repeated attempts by unauthorized persons to enter secured areas;
  • requests sent by email that attempt to acquire usernames, passwords or credit card information (phishing incidents).
  1. Immediately report the above incidents to the University Information Office (UIPO) at it-incident@iu.edu or 812-855-8476

  2. Call CAITS - Room DS120 at 317-274-5336

  3. Tell your supervisor and/or the IUSD Privacy Officer.

 

IF YOUR MOBILE DEVICE IS STOLEN OR LOST (https://kb.iu.edu/d/avbx )

If your phone, laptop, thumb drive, flash drive, ipad, tablet or other mobile device on which you might receive, access, or store PHI is lost, stolen, hacked or otherwise compromised, as soon as possible:

  1. Call local police (If the incident occurred on the IU campus, call campus police 317-274-2058.)

  2. Email it-incident@iu.edu

  3. Tell your supervisor and/or the IUSD Privacy Officer.

If you do not hear from a person within 30 minutes of your contact, then call 812-855-9910 and ask them to page the University Information Security Office.