print

Resident and Fellow Policy Manual

Information Security Breach Notification Act:

Due to increasing numbers of identity theft crimes, New York State, like many others, has enacted an Information Security Breach Notification Act.  This act targets private information (social security number, driver’s license number, credit card number with access etc.) about an individual and requires that individuals be notified if their private information should become lost or stolen, or a system hacked which contained this information.  The best way to lessen the likelihood of having private information lost or stolen is to minimize copying this data to local systems, especially on portable devices (laptop, Blackberry, jump/flash drives, PDA, etc.) which can be easily misplaced or stolen.  If you should experience a loss or theft of private information, please notify UR Security Services (275-3333).  If you become aware that any system containing private information has been hacked, call the ISD Help Desk at 275-3200.  As required in HIPAA Policy 0S7 Incident Response, also contact the facility’s Privacy Officer and HIPAA Security Official.  Contact information for these individuals can be found at:  http://intranet.urmc.rochester.edu/policy/HIPAA/FAQsResources/Officers.asp.