The following paper will describe the procedure required to submit a privacy or security complaint to the Office of Civil Rights (OCR). Before I go further, some background into the scenario is required. A sophomore at Premier College living in the Graham Dormitory Complex (Room 203). It is required that this student keeps current health and vaccination records as proof of insurance. This student has not been feeling well due to academic pressure. In addition, the student’s parents recently separated , which made it hard for the student to concentrate.
Going to the Student Medical Center, you request some medications to help with sleep and, after consulting a staff doctor, was treated for depression via prescription medication. During a class, the professor approaches this student and says that he comes from a divided family and also takes medication to cope. When the student inquires how was the professor privy to this information, the professor replies that medical records of the student body were available to all instructors and staff, regardless of if the student belongs in their class or not.
Upon hearing this, the student feels that their privacy rights have been violated. The student arranges a meeting with Alex, who is knowledgeable in this area. Alex discusses the HIPAA Security Rule with this student as well as outlines the standards on how to file. Upon thinking about it more, the student discusses it with their Uncle Samuel, who happens to be a legal advisor. To this end, he gives the sophomore some tasks to aid them in understanding the filing process.
To start, earlier iterations of HIPAA include the Privacy Act of 1974 and the Feedom of Information Act. By putting it under the purview of the Office of Civil Rights, this can be enforced. To note, some of the special parts of the complaint form include.
* Name the covered entity.
* Describe the acts or omissions you believe that were violated the requirements of the Privacy or Security Rule.
* Must be filed within 180 days of when you know the act or omission complained of occurred. OCR may extend the period (180 days) if you can show “good cause”. Some of the situations that may can cause issues if not well defined include precluding OCR from making a compliance determination or enforcing the law(s). To summarize, we covered the preceding topics.
* Early iterations of HIPAA * Specific form sections that need critical attention.
* What happens if some of the critical sections are not well defined Hopefully, all topics were covered by this document.