Office of Compliance


The Office of Compliance provides support to both internal and external clients. The office receives and responds to subpoenas duces tecum, fields calls from the HIPAA hotline, responds to requests for medical records from members of the public, develops, implements and maintains HIPAA privacy policies and procedures, offers annual Privacy Rule training, supports the single audit, investigates privacy-related complaints and allegations of discrimination, and provides legal counsel to the Office of the Commissioner.
Please review our Non-Discrimination Notice and Privacy Policy below. For information about accessing your medical records from our CDPH Clinics, please visit our How to Obtain a CDPH Medical Record page.
Discrimination Is Against The Law
CDPH complies with applicable City, State and Federal civil rights laws and does not discriminate on the basis of race, color, sex, gender identity, age, religion, disability, national origin, ancestry, sexual orientation, marital status, parental status, military status, source of income, credit history, criminal record or criminal history.
Language assistance services are available free of charge; please notify any CDPH staff member.
Notice of Privacy Practices (HIPAA)
This Notice of Privacy Practices ("Notice") describes how the City of Chicago may use and disclose your protected health information ("PHI") to carry out treatment, payment, or health care operations and for other purposes that are permitted or required by law. It also describes your rights to access your PHI. In general, PHI is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition and related health care services.



