This complaint filing a possible
County of Orange Privacy Officer. Unsure about where to even start? These weak credentials offered very little protection and, after either guessing or programmatically cracking these account credentials, the threat actor was easily able to gain access to the accounts. If you file a complaint with OCR, and we decide we cannot help you, we may refer your complaint to another agency such as the Department of Justice. When OCR receives a patient privacy complaint, an investigator determines whether the allegations, if true, would constitute a violation of HIPAA or HITECH. Purpose: To provide a standard form for filing a HIPAA complaint or complaint of other reported violation of privacy or security of confidential information. Medical providers and associated businesses are protected by malpractice and liability insurance.