Consumer complaint received 2020-05-19
Company: Eastern Account Systems of Connecticut, Inc.
State: TX
Product: Credit reporting, credit repair services, or other personal consumer reports
Sub-product: Credit reporting
Issue: Incorrect information on your report
Sub-issue: Account status incorrect

Complaint:
I have been conversing back and forth with this establishment with no resolution. There is previous bill from XX/XX/XXXX for {$450.00} that was sent to collections in which I paid the original creditor in full. I was told by the billing department that since Eastern Account System reported that the account was a medical account on my XXXX  credit report it was a HIPAA violation to which EAS broke the law. I called EAS several times letting them know that it was paid to the original creditor XXXX XXXX XXXX as it has been handled directly with XXXX XXXX XXXX and nothing was paid to EAS, they should not be reporting any accounts on my credit reports. I sent them the proof that it had been paid in full and XXXX said they would notify EAS to notify the collection agencies to delete my files ( medical bill which is a HIPAA violation ) and update the credit bureaus. They will send me a confirmation letter. I never received a letter that confirmed that EAS confirmed my payment. I requested one on XX/XX/XXXX and was told we didnt send you one because you didnt ask for one. 
I was told that they havent received anything in regards to this matter. This has been going on for over a month and Im the one thats suffering. Im in the middle of a pandemic and it would be extremely unfortunate if I were to die and my credit report still list this account on there at all because of a violation of my rights. Instead of EAS telling me what they havent received maybe they should refer to the HIPAA Compliance Office at the original creditor or familiarize themselves that under Federal Statutes. the Fair Credit Reporting Act, ( 15 U.S.C. 1681 et seq ) and Texas Consumer Credit Statutes, and subtitle D of the ARRA, SEC. 13401. APPLICATION OF SECURITY PROVISIONS AND PENALTIES TO BUSINESS ASSOCIATES OF COVERED ENTITIES ; and SEC. 13407 ( 1 ) BREACH OF SECURITY.The term breach of security means, with respect to unsecured PHR identifiable health information of an individual in a personal health record, acquisition of such information without the authorization of the individual. you may be held liable for the actions of EAS. Please note that these liabilities are under the penalty rules of the Omnibus Final Rule effective XX/XX/XXXX interpreting and implementing various provisions of the Health Information Technology for Economic and Clinical Health Act of XXXX ( HITECH Act ) as  issued XX/XX/XXXX. 
Additionally, I received a response from EAS stating " You did not respond for 8 months. We were assigned the account last XXXX and it wasn't paid until last month despite our calls and letters. It will be correctly updated as pif on your credit reports. '' It's already reported to my credit reports however, it should not be listed as dispute and it would be unsavory if I see that they updated ( for the second time ) and make remarks that I am disputing.

Company public response: Company believes it acted appropriately as authorized by contract or law
Company response to consumer: Closed with explanation