West Virginia State Privacy Office

Incident Response

This page is intended for the use of WV Executive Branch employees.
For consumer complaints, please click this link: Consumer Info

Tools for managing an incident:

Report the Incident:
WV Office of Technology
Response to Unauthorized Disclosures Procedure
General Questions from the Public
Breach Notification Letter Template 

Incident Response Documents:
Post Incident Response Assessment (Click "Cancel" on the pop-up asking for credentials.)
Risk of Compromise Assessment (ROCA) HIPAA Covered Entities ONLY
Risk of Harm Assessment (ROHA) Non-HIPAA Covered Entities
Checklist for Incident Management

Additional Resources:
Privacy Rights Clearinghouse (Breach Chronology)
OCR List of Breaches Affecting More Than 500 Individuals    
American National Standards Institute (ANSI):
"The Financial Impact of Breached Protected Health Information"
Click Here: