Filing a Complaint

If you believe that a HIPAA-covered entity or its business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security, or Breach Notification Rules, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities (health plans, health care clearinghouses, or health care providers that conduct certain transactions electronically) and their business associates.

Complaint Process

Anyone can file a complaint if they believe there has been a violation of the HIPAA Rules. Learn what you'll need to submit your complaint online or in writing.

File a Complaint Online

File your complaint electronically via the OCR Complaint Portal.

Filing a Patient Safety Confidentiality Complaint

Read about the Patient Safety Confidentiality Act and how to file a complaint online or in writing.

What to Expect

Learn how OCR investigates your complaint and what happens after the investigation is complete.

Content created by Office for Civil Rights (OCR)
Content last reviewed