340:2-8-14. Privacy complaints
(a) A client or employee wishing to file a complaint regarding the use or disclosure of protected health information (PHI) is instructed to contact the Oklahoma Department of Human Services (DHS) privacy officer. • 1
(b) A client or employee who requests an alternative means of filing a complaint regarding the use or disclosure of PHI is instructed to contact the United States Department of Health and Human Services. • 2
(c) Per Section 160.316 of Title 45 of the Code of Federal Regulations, DHS must not intimidate, threaten, coerce, discriminate against, or take other retaliatory action against any individual for:
(1) filing a privacy violation complaint;
(2) testifying, assisting, or participating in an investigation, compliance review, proceeding, or hearing conducted by a government enforcement agency; or
(3) opposing any act or practice made unlawful by the Health Insurance Portability and Accountability Act Privacy Rule, provided the manner of opposition does not involve a PHI disclosure.
1.(a) The address is:Oklahoma Department of Human Services, Privacy Officer, PO Box 25352, Oklahoma City, Oklahoma 73125.
(b) The privacy officer documents each complaint received and must keep the documentation for at least six years.
(c) The privacy officer investigates each complaint and documents the resolution of the investigation and any corrective actions taken.
2.The address is:Office for Civil Rights, United States Department of Health and Human Services, 1301 Young Street, Suite 1169, Dallas, Texas 75202.