HIPAA Incident Response Quick Guide
Internal quick guide for reporting suspected privacy and security incidents.
Act quickly and report promptly
If you suspect an unauthorized access, disclosure, loss, or transmission of protected health information, stop the activity if safe, preserve relevant details, and notify your manager and Compliance through approved channels.
Do not investigate independently, delete evidence, or discuss the incident broadly. Compliance will coordinate assessment, mitigation, and required notifications.