Requested validation by company to include a breakdown of fees including any collection costs and medical charges, an agreement with the client that granted them the authority to collect on this alleged debt, or proof of acquisition by purchase or assignment and authorization under subtitle D of the  ARRA, SEC. 1340  1.  APPLICATION OF SECURITY PROVISIONS AND PENALTIES TO BUSINESS ASSOCIATES OF COVERED ENTITIES ; and SEC.  13407 ( 1 )  BREACH OF SECURITY, as well as an agreement that bears the signature of the alleged debtor wherein he or she agreed to pay the creditor and as this is a medical account a copy of any  HIPAA  authorization. The collection company sent a summary of charges in an itemized statement which also pertains HIPAA information without any reference to an agreement between them and the original creditor and without a copy of my signature. I sent via certified mail, received in their office on  XXXX / XXXX / XXXX  another request for the information or a cease and desist of all reporting information to my credit report. I have not received any additional information and these accounts are still reporting on my credit reports.     Copy of letter sent without account numbers and personal information :  XXXX / XXXX / XXXX  To Whom It May Concern : This letter is being sent to you in response to your recent fraudulent verification of an unknown medical account on my   XXXX   XXXX  , and  XXXX  reports. This is a notice that your reported claim is disputed.     Under the Fair Debt Collections Practices Act ( FDCPA ), I have the right to request validation of the debt. I am requesting proof that I am indeed the party you are reporting on this debt, and there was some contractual obligation, which was binding on me to pay this debt.     Please attach copies of : Agreement with your client that granted you the authority to collect on this alleged debt, or proof of acquisition by purchase or assignment and authorization under subtitle D of the  ARRA, SEC. 13401.  APPLICATION OF SECURITY PROVISIONS AND PENALTIES TO BUSINESS ASSOCIATES OF COVERED ENTITIES ; and SEC.  13407 ( 1 ) BR EACH OF SECURITY. The term breach of security means, with respect to unsecured PHR identifiable health information of an individual in a personal health record, acquisition of such information without the authorization of the individual. Please note that the effective enforcement of penalties against you is under the penalty rules of the Omnibus Final Rule effective  XXXX / XXXX / XXXX  interpreting and implementing various provisions of the  Health Information Technology  for Economic an d Clinical Health Act of  XXXX   ( HITECH Act )  as issued  XXXX / XXXX / XXXX  Agreement that bears the signature of the alleged debtor wherein he or she agreed to pay the creditor and as this is a medical account a copy of any HIPAA authorization.     Please also be advised that this letter is not only a formal dispute, but also a request that you cease and desist any and all reporting activities.     Your receipt of this letter will be considered as having granted consent to the taping of any and all telephone calls to me at my home or business by you or your agents or assigns I require compliance with the terms and conditions of this letter within 15 days and a complete withdrawal, in writing, of any report to any  Credit Reporting Agency . In the event of noncompliance, I reserve the right to file charges and/or complaints with the  XXXX  on  HIPAA violations and appropriate County, State &amp; Federal authorities,  the BBB and d   XXXX   XXXX   XXXX    for violations of the FDCPA, FCRA, and Federal and State statutes for fraudulent slander of credit and illegal reporting activities on an account that is time-barred as well as NC medical privacy rules.     I also hereby reserve my right to take private civil action against you to recover damages.