164.530(a)

Administrative requirements : Personnel designation: a covered entity must designate a privacy official