special subjects
Confidentiality and HIPAA
Complaints
Patients may file complaints about compliance with these privacy practices. Complaints can be made directly to the health care professional, the Office for Civil Rights in the U.S. Department of Health and Human Services, or the privacy compliance officer designated by the institution in compliance with HIPAA. Although patients do not have a right to file a private lawsuit under HIPAA, they may bring lawsuits under other laws protecting privacy and confidentiality. The Office for Civil Rights regularly imposes civil and criminal penalties for improper disclosure of personal health information. The soundest course for health care professionals is to be well informed about HIPAA, to act in good faith, and make reasonable attempts to comply. 