Text Size:   A+ A- A   •   Text Only
Site Image

Incident Reporting

The Information Security and Privacy Office (ISPO) is responsible for receiving and reviewing privacy and information security incidents and coordinating responses to those incidents with DHS/OHA program representatives.

Reporting a privacy or security incident


If you have detected an information security or privacy problem we'd like to know about it.


Step 1 -- Alert your supervisor to the problem immediately. If the incident involves your supervisor, you may report the incident directly to the Information Security Office--see Step 3. 

Note: If the incident involves the theft or loss of a DHS/OHA computer, laptop, or BlackBerry device:

  • Report loss to the OIS Service Desk: (503) 945-5623.
    They will deactivate the device and any affected accounts to limit the exposure to DHS/OHA information.
  • For thefts only, also notify your local law enforcement agency.

Step 2 -- Gather as much detail about the incident as possible: date, time, location, type of information or system, contact information. Download the Privacy Incident Report form DHS-3001 to assist in gathering incident information. Completing the form is optional.


Step 3 -- Report the incident to the Information Security ande Privacy Office (ISPO) via phone, email, fax, or in-person.

Phone 503-945-5780 or email dhs.privacyhelp@state.or.us. The complete list of ISPO Contacts is on our website.



Back to top