Cooperate with external departments in any compliance reviews or investigations

Cooperate with the U. S. Department of Health and Human Service’s Office of Civil Rights, State Regulators, and/or other legal entities/privacy officers in any compliance reviews or investigations.

The Chief Privacy Officer, in collaboration with the Public Affairs and other applicable departments as necessary, shall direct and oversee the process of determining what additional external notifications are required for compliance reviews or investigations (for example., Secretary of Department of Health & Human Services, media outlets, law enforcement officials, etc.)

Source :
http://www.hcca-info.org/Portals/0/PDFs/Resources/library/HIPAA-Privacy%20Breach%20Investigation%20and%20Notification%20Policy.pdf