13Safety
Incident reporting & escalation
Report fast, report honestly. A timely report — even of your own mistake — is always treated better than a delayed or hidden one.
What counts as an incident
- Suspected or confirmed disclosure of PHI
- Lost, stolen, or compromised device or credentials
- Phishing email opened, clicked, or replied to
- Patient safety event, near miss, or complaint
- Workplace injury or unsafe condition
- Harassment, discrimination, or threatening behavior
Reporting timeline
- Security or PHI: within 1 hour — call, do not just email
- Patient safety: same shift, before you leave
- Workplace injury: immediately, then written report within 24 hours
- HR / conduct concerns: within 48 hours, in writing
- Suspected fraud or financial misconduct: immediately to Compliance
When something happens
0/5What goes in the report
0/5Retaliation is not tolerated
Anyone who reports an incident in good faith is protected. Retaliation against a reporter is itself a reportable violation. If you ever feel pressured not to report, escalate directly to HR or Compliance.