CD employees may not intimidate, threaten, coerce, discriminate against, or take other retaliatory action against any individual or other person for exercising his/her rights under HIPAA or for participating in a process established by HIPAA. CD staff will comply with provisions of the Whistleblower Law (Department of Social Services policy 2-100), which states that supervisors and managers are not allowed to prohibit employees from discussing agency operations with members of the legislature or the state auditor.