HIPAA is a federal standard, that must be the miniak standard. If a locality or buisiness has a more strict policy, then legally those policies must be upheld. How can this be applied to employee at will? When I was hired I was promised an Ombudsman and policies that would protect me from unfair treatment. I was fired for reporting billing errors. Where can I find the actual legislation on line regarding employment law?