Reporting Unauthorized Disclosures or Use of Tufts Information

If you suspect any of the university’s non-public information may have been disclosed or accessed without authorization, then contact the TTS Service Desk immediately by phone at 617 627-3376. The OUC will help coordinate the university’s response to the incident.

It is especially important to report the incident immediately if the information disclosed or misused is protected by regulation or is otherwise Restricted Institutional Data, including:

• Personal information, including Social Security numbers, driver’s license numbers, other government ID numbers, credit card and other financial account information
• Student records protected by FERPA
• Student financial aid records protected by the Gramm Leach Bliley Act (GLBA)
• Personal information collected from persons in the European Economic Area protected by the General Data Protection Regulation (GDPR)

If the disclosure or misuse involved Personal Health Information protected by the Health Insurance Portability and Accountability Act (HIPAA), see Reporting an Information Security Incident for how to report the incident.

For all incidents, see Reporting an Information Security Incident for more information on additional steps you should take.