If you have reason to believe that violations of Boston University privacy policies or improper conduct has occurred, you should report your concerns through any of the following mechanisms.
Reporting a Sensitive Data Incident
Reporting a Sensitive Data Incident: The Incident Response Team (IRT) provides coverage 7 days a week, 365 days a year to respond to reported breaches of security. The IRT encourages anyone who is aware of a potential security breach affecting Boston University accounts, computers, or networks to report all available information to the IT Help Center or call our hotline at 617-358-1100. Since quick response is essential in limiting the damage caused by a security incident, we encourage all our clients to report information to us that may help identify breaches in our security as soon as possible.
You may contact the IRT using one of two ways: (1) Via the web: Report an Incident; or (2) Call our 24 hour hotline at 617-358-1100. More information can be found on the Reporting a Sensitive Data Incident webpage maintained by the Incident Response Team.
Reporting a Possible Breach of HIPAA-protected and/or Healthcare Information
The Incident Response Team receives reports of potential HIPAA breaches and you can email them directly at
irt@bu.edu.
Report a potential breach
More information can be found on the www.bu.edu/hipaa webpage, including information on understanding your privacy rights as a patient and as a student.
BU Ethics and Compliance Hotline
The University has established an anonymous reporting hotline, the Ethics and Compliance Hotline, independently administered by a third-party provider EthicsPoint, to allow for anonymous and confidential reporting of activities that may involve improper conduct or violations of Boston University policies. All reports will be investigated promptly and discreetly by the University, receiving careful consideration with the objective of addressing any improper conduct or violation of University policy.
This hotline is not a substitute for, nor does it supersede, any existing reporting methods or protocols for handling concerns and complaints. If you would like to report your concern to Boston University directly and are uncertain how to begin, contact Compliance Services (comply@bu.edu; 617-358-8090) for assistance.
Reporting Concerns Confidentially
Reporting to the Responsible Office
Consider contacting the individuals responsible for specific areas of compliance, which are identified in the Compliance Matrix.
Office/Source – For Specific Issue(s)
- Equal Opportunity Office – Harassment, discrimination, or sexual misconduct
Email: eoo@bu.edu; EOO’s Incident report Form
- Global Programs – Academic programs, research or travel abroad
Email: global@bu.edu
- Human Resources – Employment issues
- Internal Audit – Financial, compliance or ethical issues
- Office of the General Counsel – Legal or ethical issues
- Office of the Provost – Academic affairs, faculty issues, or student issues
- Office of Research Compliance – Research activities, including scientific misconduct, research safety, animal welfare, or other safety or research compliance matters
Resources to report concerns are detailed on the Research Compliance webpage, available through the Office of Research Website.
- Office of the Treasurer – Financial issues
- Director Health Privacy and Compliance – Privacy of Health Information
- Compliance Services – Any compliance or ethics issues or concerns
