I have witnessed a HIPAA violation and I am concerned that the persons I tell this to will only ignore it and sweep it under the rug. This violation is known to all persons in administration as well. They are doing nothing about it. They are trying to say "it is ok, we investigated the concern and everyone was approved" etc...but yet I know for a fact that they did no investigation and are now trying to blame staff (because they do not want the attention and possible fines). What do I do in a case where management is the one doing the violating? I can't go to someone in the hospital because they will retaliate against me for reporting it or at least trying to report it. I don't want to loose my job, but right is right. I am supposed to be the patient's advocate. I have already been suspended due to my questioning of their methods. Isn't there a "whistle blowers" protection from that? I am a my wits end. This cannot be allowed to continue. A patient's rights and privacy have been taken advantage of. Please help me find answers...How do I report to OCR and keep my name from being plastered on the front page? Do I need to get a lawyer?