150.209—Verification of exhaustion of remedies and contact with State officials.
If CMS receives a complaint or other information indicating that a State is failing to enforce HIPAA requirements, CMS assesses whether the affected individual or entity has made reasonable efforts to exhaust available State remedies. As part of its assessment, CMS may contact State officials regarding the questions raised.