\n
\n
\u00a0<\/div>\n<\/div>\n<\/span><\/p>\n Employees often worry about whether something \u201ccounts\u201d as a HIPAA violation.\u00a0<\/span>You are not responsible for deciding whether a HIPAA violation occurred. Only the HIPAA Privacy Officer (or their designee) has the authority and training to make that determination. Your role is simply to report anything that seems unusual, accidental, or concerning.<\/p>\n A suspected Privacy Incident<\/b> is any access, use, disclosure, or loss of Protected Health Information (PHI) that may not be permitted under HIPAA or our internal policies\u2014even if you are unsure whether it is a breach.<\/p>\n\n\n Please use any reporting option below:<\/p>\n Timeliness matters. HIPAA requires prompt investigation and mitigation. Reports may be made 24\/7<\/b>. There is no penalty for good-faith reporting<\/b>.<\/p>\n\n\n <\/body><\/html>\n\n <\/div>\n<\/div>\n\n \n This list is not exhaustive<\/b>:<\/p>\n <\/b><\/p>\n\n <\/body><\/html>\n\n <\/div>\n<\/div>\n\n <\/div>\n<\/b><\/b><\/p>\n\n\n The Privacy Officer will:<\/p>\n NAU strictly prohibits retaliation<\/b> against any workforce member who reports a Privacy incident or participates in an investigation in good faith.<\/p>\n<\/body><\/html>\n\n <\/div>\n<\/div>\n\n\n “Workforce Members” work or train at NAU’s Health Care Components and can be any of the following (whether paid<\/b>or unpaid)<\/b>:<\/p>\n Report it anyway. The Privacy Officer determines whether an event meets the legal definition of a breach.<\/p>\n<\/body><\/html>\n\n <\/div>\n<\/div>\n\n\nReport a Suspected HIPAA Incident<\/b><\/h1>\n
\n
\n
\n How To Report a Suspected Privacy Incident Tab Open<\/span>\n <\/h4>\n <\/div>\n <\/a>\n <\/li>\n
\n Examples of Suspected Privacy Incidents Tab Closed<\/span>\n <\/h4>\n <\/div>\n <\/a>\n <\/li>\n <\/ul>\n \n
How To Report a Suspected Privacy Incident Accordion Open<\/span><\/h4>\n <\/span>\n <\/div>\n <\/a>\n
\n
\n<\/b>(see form below or send documents to PO Box 4116, Flagstaff, AZ 86011)<\/li>\nExamples of Suspected Privacy Incidents Accordion Closed<\/span><\/h4>\n <\/span>\n <\/div>\n <\/a>\n
\n
What Happens After You Report Accordion Closed<\/span><\/h4>\n <\/span>\n <\/div>\n <\/a>\n
\n
\n
Retaliation Is Prohibited Accordion Closed<\/span><\/h4>\n <\/span>\n <\/div>\n <\/a>\n
Who must report suspected HIPAA incidents? Accordion Closed<\/span><\/h4>\n <\/span>\n <\/div>\n <\/a>\n
\n
FAQs<\/b><\/h1>\n\n
What if I am not sure it is a breach?\u00a0 Accordion Closed<\/span><\/h4>\n <\/span>\n <\/div>\n <\/a>\n