Refraining from Retaliatory Acts

164.530(g)
Refraining from Retaliatory Acts.
All covered entities must have policies and procedures in place to prohibit retaliatory acts.

Audit Inquiry

164.530(g) – Refraining from Retaliatory Acts
Does the covered entity have appropriate policies and procedures in place to prohibit retaliation against any individual for exercising a right or participating in a process (e.g., assisting in an investigation by HHS or other appropriate authority or for filing a complaint) or for opposing an act or practice that the person believes in good faith violates the Breach Notification Rule? Obtain and review such policies and procedures.