1. What documentation, if any, is required regarding the contact person?
2. Can the privacy official and the contact person for complaints be the same person?
3. Can health care providers ever condition an individual's receipt of services on his/her signing of a consent for uses and disclosures of protected health information?