What to Do in In the Event of Theft, Loss or Unauthorized Use of Confidential Research Data

A data security breach occurs when there is a loss or theft of, or other unauthorized access to, sensitive personally identifiable information that could result in the potential compromise of the confidentiality or integrity of data. Forty-six states, the District of Columbia, Puerto Rico, and the Virgin Islands have laws requiring notification of security breaches involving personal information. Federal statutes, regulations, and a memorandum for federal departments and agencies require certain sectors (healthcare, financial, federal public sector, and the Department of Veterans Affairs) to implement information security programs and provide notification of security breaches of personal information.

Anyone at Princeton University who knows or suspects that their confidential research data has been lost, stolen or used inappropriately is advised to contact the IRB Team for immediate assistance.