Was personal information Yes Cease transmission of email or correspondence to the in an unencrypted email No incorrect address. sent to the wrong address? Unsure Determine whether the email address is incorrect in the system (e.g. programmed incorrectly into the system). Attempt to recall the message. Determine where the email went. Request that the recipient delete all affected email or correspondence, with confirmation via email that this has been done. Determine whether personal information was further disclosed to others (verbally or via copies). Document the steps taken. Complete this form and send to the UREB. Was personal information Yes Determine where the document went. faxed, mailed or delivered No Determine whether the address is incorrect in the to a wrong address? Unsure system (e.g. programmed incorrectly into system). Request that the recipient return the document(s) if mailed, or request that the fax be destroyed, with confirmation that this has been done. Determine whether personal information was further disclosed to others (verbally or via copies). Document the steps taken. Complete this form and send to the UREB. Did a third party Yes Contact security and IT to isolate the affected system, compromise (hack into) a No disable the affected system, or disable the user account system that contains Unsure to permit a complete assessment of the breach and personal information? resolve vulnerabilities. Document the steps taken. Complete this form and send to the UREB. Did the sale or disposal of Yes Contact IT. equipment or devices that No Document the steps taken. contain personal Unsure Complete this form and send to the UREB. information occur without a complete and irreversible purging of the item before its sale or disposal? Was there an inappropriate Yes Remove, move or segregate exposed information or display of personal No information clearly visible Unsure Preserve evidence. to employees or clients? Determine whether personal information was further (e.g. posting of medical disclosed to others (verbally or via copies). appointments or types of Document the steps taken. leave, home telephone Complete this form and send to the UREB. numbers, slides of PowerPoint presentations that contain personal information)? Was there an inappropriate Yes Determine whether personal information was further collection of personal No disclosed to others (verbally or via copies). information? Unsure Complete this form and send to the UREB.
Was personal information in an unencrypted email sent to the wrong address? Yes No Unsure Cease transmission of email or correspondence to the incorrect address. Determine whether the email address is incorrect in the system (e.g. programmed incorrectly into the system). Attempt to recall the message. Determine where the email went. Request that the recipient delete all affected email or correspondence, with confirmation via email that this has been done. Determine whether personal information was further disclosed to others (verbally or via copies). Document the steps taken. Complete this form and send to the UREB. Was personal information faxed, mailed or delivered to a wrong address? Yes No Unsure Determine where the document went. Determine whether the address is incorrect in the system (e.g. programmed incorrectly into system). Request that the recipient return the document(s) if mailed, or request that the fax be destroyed, with confirmation that this has been done. Determine whether personal information was further disclosed to others (verbally or via copies). Document the steps taken. Complete this form and send to the UREB. Did a third party compromise (hack into) a system that contains personal information? Yes No Unsure Contact security and IT to isolate the affected system, disable the affected system, or disable the user account to permit a complete assessment of the breach and resolve vulnerabilities. Document the steps taken. Complete this form and send to the UREB. Did the sale or disposal of equipment or devices that contain personal information occur without a complete and irreversible purging of the item before its sale or disposal? Yes No Unsure Contact IT. Document the steps taken. Complete this form and send to the UREB. Was there an inappropriate display of personal information clearly visible to employees or clients? (e.g. posting of medical appointments or types of leave, home telephone numbers, slides of PowerPoint presentations that contain personal information)? Yes No Unsure Remove, move or segregate exposed information or Preserve evidence. Determine whether personal information was further disclosed to others (verbally or via copies). Document the steps taken. Complete this form and send to the UREB. Was there an inappropriate collection of personal information? Yes No Unsure Determine whether personal information was further disclosed to others (verbally or via copies). Complete this form and send to the UREB.