If you believe that a HIPAA-covered entity or its business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.
In accordance with the Office for Personnel Management's and CDC's guidelines on COVID 19, HHS personnel are teleworking. OCR is committed to handling your complaint as quickly as possible. However, for faster processing we strongly encourage you to use the OCR online portal to file complaints rather than filing via mail as our personnel on site is limited.Complaint Process
Anyone can file a complaint if they believe there has been a violation of the HIPAA Rules. Learn what you'll need to submit your complaint online or in writing.
File a Complaint Online
File your complaint electronically via the OCR Complaint Portal.
Filing a Patient Safety Confidentiality Complaint
Read about the Patient Safety Confidentiality Act and how to file a complaint online or in writing.
What to Expect
Learn how OCR investigates your complaint and what happens after the investigation is complete.
