Home > Campuswide IT Policy and Privacy > Responding to Possible Data Breaches

Responding to Possible Data Breaches

• Report suspected breaches of networked computers to


• Report laptop or other computer thefts to UCPD.

See the flowchart illustrating Campus-wide Computer Incident Response Team (CCIRT) processes. Questions may be addressed to

CAMPUS PROCEDURES FOR SPECIFIC TYPES OF DATA:

• Personal information under SB1386
  See the Berkeley Campus Plan Implementing the UC Requirements for Protection of Computerized Personal Information for responding to possible security breaches of computerized, unencrypted, "personal information" defined as an individual's first and last name in combination with any of the following:

  ... social security number, driver's license number or California identification card number, or financial account or credit card number in combination with any password that would permit access to the individual's account, medical information or health insurance information.

  (California State Information Practices Act section 1798, originally SB1386). Owners of such data must give notice of any security breach to affected persons without unreasonable delay.


• Protected health information Report possible breaches of individually identifiable health information to the Campus HIPAA (Health Insurance Portability and Accountability Act) Security officer at:


• Research data
  Report possible breaches of research data to the Office Research Administration and Compliance.