Welcome to the Agency for Health Care Administration's HIPAA Privacy and Security Compliance Office. Our primary function is to advise and assist the Agency in its compliance efforts and to assist Medicaid beneficiaries in exercising their rights as provided by HIPAA. This includes making sure that all AHCA employees safeguard the privacy of any Protected Health Information (PHI) in our custody.

HIPAA, AHCA and You
Our office is responsible for assisting Medicaid beneficiaries in exercising their rights provided under HIPAA as these rights relate to their claims information. These rights are listed below. For a detailed description of your rights, as well as information on how Medicaid may use your Protected Health Information (PHI), please see
The Medicaid and MediKids Notice of Privacy Practices.

• To request access to your Protected Health Information (PHI), (70Kb .pdf).
• To request an accounting of disclosures, (22Kb .pdf)
• To request restrictions of uses and disclosures of your PHI, (23Kb .pdf).
• To request an amendment to your PHI, (21Kb .pdf).
• To request communications from the Agency by alternate means, (22Kb .pdf).

*** Please direct all correspondence to the HIPAA Compliance Office address listed below. ***

HIPAA Questions and Complaints
Our Agency, Area Offices included, does not have the authority to advise non-AHCA personnel on any HIPAA related issues. All such questions should be directed to the Office for Civil Rights HIPAA Website: http://www.hhs.gov/ocr/hipaa/, or contact them at 1-866-627-7748. Included on this site are the Privacy Rule, Frequently Asked Questions and directions on how to file a HIPAA complaint.

The following is a list of commonly asked questions that should be directed to the Office for Civil Rights (see above):

• What is HIPAA, and what are my rights?
• How do I file a HIPAA complaint against my health care provider?
• What do I do if my doctor will not give me my medical records?
• If I am a health care provider, how do I comply with HIPAA?

Please Note: If you feel that an AHCA employee has violated HIPAA, in addition to contacting the Office for Civil Rights, please notify AHCA's HIPAA Privacy and Security Compliance Office at 850-488-3849.

Non-HIPAA Questions and Complaints
Please review the following information for all questions and requests that are not covered in the preceding sections.

• If you wish to file a general complaint against a health care provider or facility please contact the AHCA Consumer Hotline at 1-888-419-3456.
• To make a public records request, including facility complaint files, please contact the Public Records Coordinator (see Contact Information).
• For all other concerns or questions that do not relate to HIPAA please contact your local area Medicaid office.

Contact Information

HIPAA Privacy and Security Compliance Office
Agency for Health Care Administration
2727 Mahan Drive, Mail Stop #4
Tallahassee, FL 32308-5403
Phone: (850) 488-3849
Fax: (850) 414-6837
Email:  hipaaco@ahca.myflorida.com

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Room 509F, HHH Building
Washington, D.C. 20201
HIPAA toll-free number at (866) 627-7748

For the hearing impaired, please contact toll-free TDD line: (800) 537-7697

http://www.hhs.gov/ocr/hipaa/

Public Records Coordinator
Agency for Health Care Administration
2727 Mahan Drive, Fort Knox #3, Mail Stop #2
Tallahassee, FL 32308-5403
(850) 414-6044, Message Line
(850) 921-9041, Fax Line