KILINIKI HMIS Back to sign in
Incident Reporting

Report a security or privacy incident

Tell us quickly if you think patient or facility data has been exposed, lost or misused.

1. What to report

  • A lost or stolen device that was signed in to KILINIKI HMIS.
  • Someone using your account, or a password or code you shared by mistake.
  • Records shown to the wrong person, or a record you should not be able to see.
  • A suspicious email, call or message asking for your sign-in details.

2. How to report

  1. Tell your facility administrator or data protection lead immediately. Staff who are signed in can also log an incident from the Incident Response screen.
  2. Your administrator will escalate the report to the KILINIKI HMIS support team.
  3. If your account may be compromised, change your password as soon as you can.

Do not include patient details in an email. Describe what happened and we will follow up securely.

3. What to include

  • When it happened, or when you noticed it.
  • Your facility and the account involved.
  • What you saw, and anything you have already done about it.

4. What happens next

Reports are assessed, contained and investigated. Where the law requires it, the facility, as data controller, will notify the Office of the Data Protection Commissioner and affected people.