Source: https://law.stackexchange.com/questions/5601/how-to-report-an-infraction-of-the-hipaa-requirements/5610