Does anyone have a procedure on how to handle HIPAA privacy violation complaints that they would be will to share? Please, thanks.

Here's the policy:
Policy and Procedure: Complaints

Complaints about the group health plan’s compliance with the requirements of the HIPAA Privacy Rule or the group health plan’s health information privacy policies are to be delivered to the privacy officer at ___________. This information is to be included in the privacy notice.

The privacy officer will determine if a violation has occurred, take steps to mitigate any damage that has occurred, and discipline any employee who has violated the rule or plan policies.

Complaints that the privacy officer has violated the requirements of the HIPAA Privacy Rule or the group health plan’s health information privacy policies are to be referred to the health benefits manager for resolution.
The privacy officer will keep a record of all filed complaints and their disposition for six years following the disposition of the complaint.

Here is the form that goes with it:
COMPLAINT FORM

You should use this form if you believe that the GROUP HEALTH PLAN (“GHP”) has failed to comply with matters covered in its Notice of Privacy Practices or has failed to comply with its privacy policies as required by Standards for the Privacy of Individually Identifiable Health Information (often called the “Privacy Rule”). GHP will not penalize or any other way retaliate against you filing a compliant.

I. INDIVIDUAL DATA:

INDIVIDUAL’S NAME:

GROUP HEALTH PLAN ID NUMBER:

ADDRESS:

TELEPHONE NO.:

II. COMPLAINT

A. What is the nature of your complaint?
(Please describe the reasons for your complaint in as much detail as you can provide. For example, which provision in the Privacy Notice you believe that GHP has violated and how GHP may have committed the violation.)

B. When did the action causing the violation occur?

C. If relevant, identify any persons at GHP’s organization that may have information about your complaint.

Upon completion of this form please return it to:

Name:
Address:


Telephone:

If you have any questions about this form or matters covered in GHP’S Notice of Privacy Practices, please contact GHP’s Privacy Officer at the above address or at .

You certify that the statements made in this complaint are true and correct to the best of your information and belief.



SIGNATURE:

NAME OF INDIVIDUAL (Please Print)

Date: