OP, Google for "HIPAA Process" for more info. These forums don't support this info and posting of the letters aren't allowed on here.
Mod-hat aside, I've read HIPAA over and over and over again due to being a health plan admin at one point. Frankly I never connected the letters available out there on the web with the HIPAA process. They seemed to contort the law to fit it to their own needs, even if legally incorrect. However, there are some success stories out there. CAs and the CRAs weren't up-to-date on HIPAA regs and many of them caved at the sight of a HIPAA letter via the HIPAA process. Lately though there seems to be some posts claiming that the process isn't working for them. It seems it's increasing difficult to find success as of late. IMO, the HIPAA process is a tool in the tool bag, but I prefer to DV then PFD to get the same result...less risky too. The HIPAA process begins with paying the OC off and if the HIPAA process doesn't work, then all you have is a paid CA which doesn't help any.
