CINXE.COM

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" version="XHTML+RDFa 1.0" dir="ltr" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/terms/" xmlns:foaf="http://xmlns.com/foaf/0.1/" xmlns:og="http://ogp.me/ns#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:sioc="http://rdfs.org/sioc/ns#" xmlns:sioct="http://rdfs.org/sioc/types#" xmlns:skos="http://www.w3.org/2004/02/skos/core#" xmlns:xsd="http://www.w3.org/2001/XMLSchema#"> <head profile="http://www.w3.org/1999/xhtml/vocab"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="Generator" content="Drupal 7 (http://drupal.org)" /> <link rel="canonical" href="/report-privacy-incident" /> <link rel="shortlink" href="/node/626" /> <link rel="shortcut icon" href="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/favicon.ico" type="image/vnd.microsoft.icon" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <meta property="og:image" content="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/img/img-metatag.jpg" /> <meta property="og:image:width" content="940" /> <meta property="twitter:image" content="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/img/img-metatag.jpg" /> <meta property="twitter:card" content="summary" /> <meta property="og:site_name" content="Office of Healthcare Compliance & Privacy" /> <meta property="twitter:url" content="https://ohcp.ucsf.edu/report-privacy-incident" /> <meta property="og:url" content="https://ohcp.ucsf.edu/report-privacy-incident" /> <meta property="twitter:title" content="Report a Privacy Incident | Office of Healthcare Compliance &amp; Privacy" /> <meta property="og:title" content="Report a Privacy Incident" /> <title>Report a Privacy Incident | Office of Healthcare Compliance & Privacy</title> <style type="text/css" media="all"> @import url("https://ohcp.ucsf.edu/modules/system/system.base.css?srijuq"); @import url("https://ohcp.ucsf.edu/modules/system/system.messages.css?srijuq"); @import url("https://ohcp.ucsf.edu/modules/system/system.theme.css?srijuq"); </style> <style type="text/css" media="all"> @import url("https://ohcp.ucsf.edu/modules/comment/comment.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/fences/field.css?srijuq"); @import url("https://ohcp.ucsf.edu/modules/node/node.css?srijuq"); @import url("https://ohcp.ucsf.edu/modules/search/search.css?srijuq"); @import url("https://ohcp.ucsf.edu/modules/user/user.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/views/css/views.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/ckeditor/css/ckeditor.css?srijuq"); </style> <style type="text/css" media="all"> @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/ctools/css/ctools.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_admin_menu/css/ucsf_b1gfoot_admin_menu.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_sitewizard/css/ucsf_b1gfoot_sitewizard.css?srijuq"); </style> <style type="text/css" media="all"> <![CDATA[/*> </style> <link type="text/css" rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/hopscotch/0.2.5/css/hopscotch.min.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css" media="all" /> <style type="text/css" media="all"> @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/slick/slick.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/screen.css?srijuq"); </style> <style type="text/css" media="all"> <![CDATA[/*> </style> <style type="text/css" media="all"> @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/colors/primary/primary-navy.css?srijuq"); @import url("https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/css/colors/secondary/secondary-teal.css?srijuq"); </style> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/jquery_update/replace/jquery/1.12/jquery.min.js?v=1.12.4"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/misc/jquery-extend-3.4.0.js?v=1.12.4"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/misc/jquery-html-prefilter-3.5.0-backport.js?v=1.12.4"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/misc/jquery.once.js?v=1.2"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/misc/drupal.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/jquery_update/js/jquery_browser.js?v=0.0.1"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/misc/form-single-submit.js?v=7.101"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/contrib/entityreference/js/entityreference.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_admin_menu/js/ucsf_b1gfoot_admin_menu.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_eds_profiles/ucsf_eds_profiles_tweaks.js?srijuq"></script> <script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/hopscotch/0.2.5/js/hopscotch.min.js"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/y3ti_help/js/y3ti_help.js?srijuq"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/modules/b1gfoot/ucsf_b1gfoot_sitewizard/js/ucsf_b1gfoot_sitewizard.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/slick/slick.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/icheck.min.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/build/main.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/vendor/responsive-nav/responsive-nav.min.js?srijuq"></script> <script type="text/javascript" src="https://ohcp.ucsf.edu/profiles/ucsf_b1gfoot/themes/ucsf_b1gfoot_theme/js/script.js?srijuq"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> </head> <body class="html not-front not-logged-in page-node page-node- page-node-626 node-type-page slider-secondary ucsf-b1gfoot font--header--helveticaneue nav--lock slider-secondary-no-image profile--expanded sidebar sidebar--right sidebar-color--white" > <div id="skip-link"> <a href="#main-content" class="element-invisible element-focusable">Skip to main content</a> </div> <div id="page-wrapper"> <div id="page"> <div class="ucsf-top-header row-full-width logo"> <div class="inside"> <ul class="menu"> <li class="first"><a href="https://www.ucsf.edu">University of California San Francisco</a></li> <li><a href="https://www.ucsfhealth.org/">UCSF Health</a></li> <li><a href="https://www.ucsf.edu/search" title="">Search UCSF</a></li> <li><a href="https://www.ucsf.edu/about">About UCSF</a></li> </ul> </div> </div> <div id="header" class="row-full-width"> <div class="inside clearfix"> <a href="/" title="Home" rel="home" id="logo"> <img src="https://ohcp.ucsf.edu/sites/g/files/tkssra4246/f/UCSF_sublogo_OfficeofHealthcareCompliancePrivacy_logo_navy_RGB.png" alt="Home" /> </a> <div class="region region-header"> <div id="block-search-form" class="block block-search"> <div class="content"> <form onsubmit="if(this.search_block_form.value=='Search'){ alert('Please enter a search'); return false; }" action="/report-privacy-incident" method="post" id="search-block-form" accept-charset="UTF-8"><div><div class="container-inline"> <h2 class="element-invisible">Search form</h2> <div class="form-item form-type-textfield form-item-search-block-form"> <label class="element-invisible" for="edit-search-block-form--2">Search... </label> <input title="Enter the terms you wish to search for." placeholder="Search..." class="text-input fa fa-search form-text" aria-hidden="" type="text" id="edit-search-block-form--2" name="search_block_form" value="" size="40" maxlength="128" /> </div> <div class="form-actions form-wrapper" id="edit-actions"><input type="submit" id="edit-submit" name="op" value="" class="form-submit" /></div><input type="hidden" name="form_build_id" value="form-WzGyKSRKmU2jiVJ5D3XWtpOxjfN-ctRLzaUX_0lZ-l8" /> <input type="hidden" name="form_id" value="search_block_form" /> </div> </div></form> </div> </div> <div id="block-ucsf-b1gfoot-tweaks-header-socialmedia" class="block block-ucsf-b1gfoot-tweaks"> <div class="content"> <div class="nav-social"></div> </div> </div> <div id="block-menu-block-1" class="block block-menu-block"> <div class="content"> <div class="menu-block-wrapper menu-block-1 menu-name-main-menu parent-mlid-0 menu-level-1"> <ul class="menu"><li class="first expanded menu-mlid-3156"><a href="/about-us">About Us</a><ul class="menu"><li class="first leaf menu-mlid-7631"><a href="/about-us" title="">Overview</a></li> <li class="leaf menu-mlid-4351"><a href="https://ohcp.ucsf.edu/meet-the-team" title="Directory of OHCP staff members">Meet the Team</a></li> <li class="last leaf menu-mlid-3961"><a href="/contact-us">Contact Us</a></li> </ul></li> <li class="expanded menu-mlid-3981"><a href="/general-compliance">General Compliance</a><ul class="menu"><li class="first leaf menu-mlid-7636"><a href="/general-compliance" title="">Overview</a></li> <li class="leaf menu-mlid-3986"><a href="/code-of-conduct" title="Code of Conduct">Code of Conduct</a></li> <li class="last leaf menu-mlid-6581"><a href="/report">Report a Concern</a></li> </ul></li> <li class="leaf menu-mlid-4331"><a href="/revenue-cycle-compliance">Revenue Cycle Compliance</a></li> <li class="expanded active-trail menu-mlid-3971"><a href="/privacy" title="Privacy overview" class="active-trail">Privacy</a><ul class="menu"><li class="first leaf menu-mlid-7641"><a href="/privacy" title="">Overview</a></li> <li class="leaf menu-mlid-3256"><a href="/patient-privacy-rights">Patient Privacy Rights</a></li> <li class="last leaf active-trail active menu-mlid-4361"><a href="/report-privacy-incident" class="active-trail active">Report a Privacy Incident</a></li> </ul></li> <li class="last leaf menu-mlid-10371"><a href="/bch-oakland">BCH-Oakland</a></li> </ul></div> </div> </div> </div> </div> </div> <div id="breadcrumb" class="row-full-width"><div class="inside"><h2 class="element-invisible">You are here</h2><div class="breadcrumb"><a href="/">Home</a> > <a href="/privacy" title="Privacy overview">Privacy</a> > <span class="breadcrumb-page-title">Report a Privacy Incident</span></div></div></div> <h1 class="title" id="page-title">Report a Privacy Incident</h1> <div class="content-top"> </div> <div id="main-wrapper"> <div id="main" class="clearfix"> <div id="content" class="column"> <div class="inside"> <a id="main-content"></a> <div class="tabs"></div> <div class="region region-content"> <div id="block-system-main" class="block block-system"> <div class="content"> <div id="node-626" class="node node-page slider-secondary clearfix" about="/report-privacy-incident" typeof="sioc:Item foaf:Document"> <span property="dc:title" content="Report a Privacy Incident" class="rdf-meta element-hidden"></span><span property="sioc:num_replies" content="0" datatype="xsd:integer" class="rdf-meta element-hidden"></span> <div class="content"> <div class="field field-name-field-body field-type-text-long field-label-hidden"><div class="field-items"><div class="field-item even"><p>Potential privacy breaches need to be reported to the Office of Healthcare Compliance and Privacy as soon as they are discovered, even if the person who discovered the incident was not involved. Under California law, UCSF has 15 days to report privacy breaches to the California Department of Public Health and notify affected patients.聽Early notification to our office is required to give us sufficient time to investigate the incident and prepare any necessary notifications.聽 Late reporting can result in significant penalties for the University. For more information, please refer to UCSF's <a href="https://policies.ucsf.edu/policy/200-30">Privacy Investigation Policy</a>.</p> <h2>How to Report</h2> <p>If <strong>personally identifiable information</strong> is involved, please complete an Incident Report through <a href="https://rl6-4.rlsolutions.com/UCSF_Production/Default.aspx">RL Solutions</a>聽using the Confidentiality/Healthcare Information category (Medical Center Employees) or <a href="https://ohcp.ucsf.edu/contact-us">contact the Office of Healthcare Compliance and Privacy</a> as soon as possible.聽</p> <p>If the incident involves聽<strong>a stolen or lost mobile device</strong>, such as a laptop, containing patient information you must also report the event to聽<a href="https://it.ucsf.edu/how_do/report-security-incident">IT Security</a>.聽If the stolen device was issued by the University, you must聽immediately contact UCSF Campus Police (415-476-1414) to report the theft.聽</p> <h2>Reporting Information</h2> <p>When reporting a potential privacy incident, please try to include聽the following information:</p> <ul> <li>Date and time the incident聽was discovered</li> <li>Name and contact information of the person who discovered the potential breach</li> <li>The specific information disclosed</li> <li>The number of individuals who had their information disclosed</li> <li>How the incident聽happened</li> <li>Actions taken following detection</li> <li>The department contact for follow-up</li> </ul> <p>You will not be retaliated against聽for reporting a potential privacy breach in good faith.</p> </div></div></div> </div> </div> </div> </div> </div> </div> </div> <div id="sidebar" class="column"> <div class="sidebar_top"> <div class="region region-sidebar-top"> <div id="block-menu-block-2" class="block block-menu-block"> <h3><a href="/privacy" title="Privacy overview" class="active-trail">Privacy</a></h3> <div class="content"> <div class="menu-block-wrapper menu-block-2 menu-name-main-menu parent-mlid-0 menu-level-2"> <ul class="menu"><li class="first leaf menu-mlid-7641"><a href="/privacy" title="">Overview</a></li> <li class="leaf menu-mlid-3256"><a href="/patient-privacy-rights">Patient Privacy Rights</a></li> <li class="last leaf active-trail active menu-mlid-4361"><a href="/report-privacy-incident" class="active-trail active">Report a Privacy Incident</a></li> </ul></div> </div> </div> </div> </div> <div class="sidebar"> <div class="section"> <div class="region region-sidebar"> <div id="block-block-31" class="block block-block"> <h3>Patient Resources</h3> <div class="content"> <p><a href="https://hims.ucsfmedicalcenter.org/HIPAA_Forms/Notice_Of_Privacy_Practice.pdf">Notice of Privacy Practices</a></p> <p><a href="https://www.ucsfhealth.org/medical-records">Medical Records Request</a></p> <p><a href="https://www.ucsfhealth.org/-/media/project/ucsf/ucsf-health/pdf/health_information_exchange_patient_opt-out.pdf?rev=ca47cc1932c54138823b36ca26b52aee&hash=5424E9BB9B8A8B2D46FB688A1A94FD58">Health Information Exchange Opt-Out</a></p> <p><a href="https://recruit.ucsf.edu/ucsf-research-participant-services#:~:text=If%20you'd%20like%20to,Call%20(415)%20476%2D9259">Research Recruitment Opt-Out</a></p> <p><a href="https://ucsf.co1.qualtrics.com/jfe/form/SV_3I7i4c4Sg0ywZiB">Fundraising Opt-Out</a></p> <p><a href="https://ohcp.ucsf.edu/contact-us">Ask a Question</a></p> </div> </div> <div id="block-block-6" class="block block-block"> <h3>Report a Concern</h3> <div class="content"> <p><a class="btn--small btn--more--reverse btn--full-width" href="https://www.universityofcalifornia.edu/hotline">UC Whistleblower Hotline</a></p> </div> </div> </div> </div> </div> </div> </div></div> <div id="footer"> <div class="section"> <div class="region region-footer"> <div id="block-block-36" class="block block-block"> <div class="content"> <div class="wysiwyg_threecols layout--33-33-33"> <div class="wysiwyg_threecols--first bg--undefined bg--transparent"> <p style="text-align: right;"><a href="https://www.ucsfhealth.org/about/" target="_blank">Our Organization</a></p> </div> <div class="wysiwyg_threecols--second bg--undefined bg--transparent"> <p style="text-align: center;"><a href="https://ohcp.ucsf.edu/about-us">About Us</a></p> </div> <div class="wysiwyg_threecols--third bg--undefined bg--transparent"> <p><a href="https://ohcp.ucsf.edu/contact-us">Contact Us</a></p> </div> </div> <p>聽</p> </div> </div> </div> <div class="footer-bottom"> <nav aria-label="Footer Navigation" class="footer--navigation"> <ul> <li><a href="https://www.ucsf.edu/accessibility-resources">Accessibility</a></li> <li><a href="https://www.ucsf.edu/website-privacy-policy">Privacy Policy</a></li> <li><a href="https://websites.ucsf.edu/website-terms-use">Terms of Use </a></li> <li><a href="https://websites.ucsf.edu/azlist">A-Z Website List</a></li> </ul> </nav> <div class="footer--copyright"> <p>© 2025 The Regents of the University of California</p> </div> </div> </div> </div> </div> </div> <script type="text/javascript"> /*<![CDATA[*/ (function() { var sz = document.createElement('script'); sz.type = 'text/javascript'; sz.async = true; sz.src = '//siteimproveanalytics.com/js/siteanalyze_8343.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(sz, s); })(); /*]]>*/ </script> </body> </html>