Report a Data Incident

As outlined in the University's Privacy of Personal Information Policy, all members of the George Washington University (“GW”) community who have access to GW systems, networks, or data are responsible for promptly reporting any suspected, potential, or confirmed data incidents involving University non-public information. Timely reporting is critical to enable appropriate investigation, mitigation, and compliance with legal and institutional obligations.

A data incident may include, but is not limited to, unauthorized access, use, disclosure, loss, alteration, or destruction of non-public information. This may involve information stored or transmitted in any format, including electronic systems (such as computers, email, or cloud storage), physical records (such as paper files), portable devices, or publicly accessible platforms (such as websites).

Please use the form below to report any suspected or actual data incident involving University non-public information. When submitting a report, provide as much detailed and accurate information as possible to assist in the assessment and response process. 

Upon receipt, GW will review and investigate the reported incident in accordance with applicable policies, procedures, and legal requirements. This may include coordinating with relevant University offices—such as Information Technology, Information Security, Privacy Office, Office of General Counsel, and other appropriate departments—to assess the scope of the incident, take necessary containment and remediation measures, and determine whether notification or additional actions are required. 

All reports will be handled in a manner consistent with University policies and applicable laws. Individuals are encouraged to report concerns in good faith and without delay.

Note: If you are looking to report a data incident related to personal data maintained by the GW Hospital, please be aware that the hospital operates independently from the university and has separate reporting channels. Details on patient rights, responsibilities, and how to report a concern are available on the Patient Rights and Responsibilities webpage.