My 22 year old daughter loves to send mail—a little old-fashioned, but endearing. Opening mail still carries the potential of discovering a treasure. Unfortunately for many organizations, the envelope may contain unpleasant information, namely an investigatory letter from the Office for Civil Rights (OCR), the entity that enforces the Health Insurance Portability and Accountability Act (HIPAA).

When individuals feel that an entity has violated HIPAA, they have the right to file a complaint with OCR. As of March 31, 2013, OCR had received