Incidental Violations

Incidental Violations

Incidental violations are unintended uses or disclosures of private data that occur during normal business activities involving an otherwise permitted use or disclosure of the information. 

For example, if an employee is taking reasonable precautions in working with private data, but another individual happens to see or overhear private data that the employee is using through no fault of the employee, then the unintended disclosure of such information will be treated as an incidental violation.  

Reasonable precautions include: 

• Keeping one’s voice low while discussing information 
• Moving to as private a location as possible while using information 
• Keeping private data in paper and electronic formats covered or otherwise inaccessible to unauthorized individuals. 

Incidental disclosures are usually not considered reportable Privacy Incidents. However, members of the workforce should use professional judgment and assess the potential outcome(s) of an incidental disclosure: report any disclosures that may result in a fraudulent or criminal misuse of the information or have a negative impact on the Colorado School of Mines or its affiliated entities.