What is a breach of security? What should I do if PHI may have been disclosed to unauthorized individuals?
A breach of security refers to any unauthorized access to PHI and usually related to electronic files or devices that contain PHI. Common examples include the use of electronic storage devices without password protection, sending email with PHI outside of the UCLA intranet or to the wrong person; a laptop/PDA/electronic storage device with PHI is stolen or lost, and other similar situations. Consult with your IT department for guidance to protect electronic devices. Investigators, staff and other individuals who are concerned that there may have been a breach of security for their research files should contact the OHRPP and the UCLA HIPAA Privacy Management Office immediately. They will work with you to assess the situation to determine who else may be notified.
Related Questions
- What are the requirements for disclosure upon breach in the security of personal information for individuals who conduct business in Louisiana or license/own such computerized data?
- What does Qwest do if there is an unauthorized disclosure of customer information or a security breach?
- Can I print PHI to a printer accessible to unauthorized individuals?
