Breach Prevention


The HIPAA Privacy Office is currently working remotely. We may be reached by email ( or by phone (203-432-5919). If you sent us a letter by mail or fax, we will be delayed in responding. Thank you for your patience.

Notify Yale IMMEDIATELY of all events that might be potential breaches! Call 203.627.4665 if you believe ePHI/PHI might have been lost, stolen, compromised, misdirected, etc. Yale HIPAA professionals will work with you to determine the next steps, and whether the event requires notification.

Anyone else wishing to report a HIPAA concern should call 203.432.5919. 

Safe Harbor: It won’t apply to most

If an environment has established ‘Safe Harbor,’ notification is not required. Safe Harbor is defined by the HITECH Act as either:

You are responsible for complying with these policies.

Please review and familiarize yourself with the Compliance Information and Compliance Requirements. You are responsible for complying with these requirements.