Was in XXXX XXXX XXXX XXXX in XX/XX/XXXX. Hospital has 3rd-party billing company - XXXX ( AKA XXXX ' ). XXXX & I have had ongoing billing issues thru XX/XX/XXXX, due to my 'overpayment ' of bill ( which should 've been 'zeroed out ' due to my insurance/their billing mistakes ). Have received XXXX ( XXXX ) refund checks from local state facility ( no address avail via XXXX, but have local # AND XXXX # ). 3 months had passed, as of this week ( opened mail XX/XX/XXXX, no datemark on XXXX envelope, just XXXX 's return city/state of XXXX, Tennessee ) with Bank of America 's debit card ( aka 'BofA ' ) attached to default debit card form, only referencing XXXX logo up top of form, reference in bottom right says, card value : {$100.00}, XXXX XXXX XXXX XXXX along with included bank facts of how private information can be shared. Never authorized 3rd-party billing to 'volunteer ' my private information ( including my SSN, which is referenced in bank doc ), nor agreed to it in hospital documentation. Contacted XXXX via XXXX #, asked for supervisor, got XXXX XXXX, rude, interrupted my statements of HIPPA violation reasons & that I 'd previously gotten refund checks, by saying it was NOT HIPPA violation, that it was 'new ' policy ( my summation is that I wo n't be the only individual dealing with this HIPPA violation ). I interrupted her to get her full name, told her I would be reporting her for HIPPA violation and hung up. Tried calling my bank to see what options I had, no one available to help, decided to call local state XXXX #, spoke to XXXX XXXX. Am uncertain whether she 's aware of other office 's ( corporate? ) policy, BUT was extremely pleasant and helpful, said she 'd follow up with me 24/48 hours later via email, repeated back to me my requests : 1, to have my private info removed from BofA ; 2, that I get a refund CHECK from XXXX ; 3, that BofA credit card made void. 
