A few questions concerning a CA and HIPAA (Privacy Rule) Received a dunning letter concerning a medical bill from a hospital. Sent validation letters requesting 1. Arrangement with client to collect on the debt response (no agreement we are hospital owned) 2. Any insurance claims made by any creditor regarding the account. response - They sent a copy of the hospital bill, insurance card, hospital band, UB 3. I requested to know if the debt was purchased or assigned. response - assigned sent them a copy of the HIPAA Act- in which they responded HIPAA laws include TPO, treatment, payment, operations and that they were falling under payments. They also sent a copy of the release of medical information release form and authorization form which bascially states they can give my information for insurance purposes and other medical affiliates for medical purposes. How should I respond to the CA.