I can't get into any detail,but MAJOR HIPPA violation will have to dealt with at my facility.I didn't do it ,but we were the ones that found out about the violation and reported it.We were afraid if we didn't we would get in trouble for not at least passing it along to upper mgt.It was quietly passed along in formal writing to the administrator because KNEW this wasn't going to go away at all.We did it for cya reasons........not to be vengeful.Sort of like "you found it ,you deal with it"The HIPPA security officer stated that if we had not reported it,we could have gotten in just as much trouble! Is this true?What happens now?I am asking what is the usual process that happens now?