NRPM: Standards for Privacy of Individually Identifiable Health Information. 8. Complaints. (§164.518(d))


Every covered entity would be required to have policies and procedures in place that allow individuals to file complaints about possible privacy violations. For a small entity, this could mean simply that they keep a specific file for complaints.