A covered entity does not have to disclose PHI to the Office for Civil Rights if they come to investigate a complaint.That is not allowed by HIPAA law.

Question

Quizplus · Accepted Answer

Under HIPAA law, a covered entity must disclose Protected Health Information (PHI) to the Office for Civil Rights (OCR) when required for compliance investigations or enforcement actions, including investigations of HIPAA complaints.

A Covered Entity Does Not Have to Disclose PHI to the Office