Filing a complaint
This guidance in information about how to file a complaint with OCR regarding compliance with the HIPAA Rules, and related questions.
Final
Issued by: Office for Civil Rights (OCR)
Issue Date: June 27, 1905
Filing a Complaint
If you believe that a HIPAA-covered entity or its business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.
In accordance with the Office for Personnel Management's and CDC's guidelines on COVID 19, HHS personnel are teleworking. OCR is committed to handling your complaint as quickly as possible. However, for faster processing we strongly encourage you to use the OCR online portal to file complaints rather than filing via mail as our personnel on site is limited.
Complaint Process
File a Complaint Online
Filing a Patient Safety Confidentiality Complaint
What to Expect
HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the guidance@hhs.gov.
DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.