OIG compliance required for all who treat Medicare patients. You cannot block a patient from their information due to the patient owing a balance. OIG takes over enforcement of that issue. HIPAA prohibits ‘non-release’ of information based on billing issues.