Ah ok..
If you sent them a DV, then they had the right to get the bill from the OC.
If you hadn't sent them a DV AND they sent you a bill with personal info on it (like what procedures were done, etc), I would say that's a HIPAA violation. Which is what I was thinking.
Well, go ahead and wait for your report.......see what happens there. See if the TL actually got deleted.
|