Technically, he did not file a complaint with the office of civil rights. He should file a formal complaint with health and human services since he discovered a

Technically, he did not file a complaint with the office of civil rights. He should file a formal complaint with health and human services since he discovered a HIPAA breach, and since they decided to be assholes about it. They aren't likely to stumble on an article and take action based on that.