I don't know if I should be concerned but I haven't received a reply back from any of the CRA. Equifax arrived on May 11 (free yearly report). Transunion arrived on May 7 (purchased report). Experian arrived on May 8 (free yearly report). I haven't done anything since sending out the pre-hippa letters. Please tell what to do next, if anything.
It's too early to expect the CRAs to have responded. They're built to respond to correspondence within 30 days. If you followed Why's advice about writing in purple ink on purple paper and watermarking it with your photo and otherwise trying to make it harder to OCR, then if that happens to be successful and they can't OCR it, then that will add time as a result of the manual processing of the letters. This makes the 30 day period even tougher for them.
I wouldn't be surprised if it was 45 days or so before you get a response, but anywhere between 30-45 seems likely.
Regarding your earlier question about the OC. In my experience OCs' always will claim that you have to deal with the CA, and that stuff like what she told you. This is why I'd deal with the OC in writing only.
I would think that you could address correspondence to the "HIPAA Compliance officer" at the OC and it will reach the right person. I doubt you need an actual name.
Edited by LizaW, 01 June 2012 - 08:53 PM.