If you believe that a covered entity violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy or Security Rule, you may file a complaint with the Office for Civil Rights (OCR). OCR can investigate complaints against covered entities.
A covered entity is a health plan, health care clearinghouse, and any health care provider that conducts certain health care transactions electronically. For more information, please review Understanding Health Information Privacy section or look at Frequently Asked Questions (FAQs).
COMPLAINT REQUIREMENTS – Your complaint must:
1. Be filed in writing, either on paper or electronically, by mail, fax, or e-mail;
2. Name the covered entity involved and describe the acts or omissions you believe violated the requirements of the Privacy or Security Rule; and
3. Be filed within 180 days of when you knew that the act or omission complained of occurred. OCR may extend the 180-day period if you can show “good cause.”
ANYONE CAN FILE! – Anyone can file a complaint alleging a violation of the Privacy or Security Rule. We recommend that you use the OCR Health Information Privacy Complaint Form Package. You can also request a copy of this form from an OCR regional office.
If you need help filing a complaint or have any questions about the complaint or consent forms, please contact Samantha Moffett at (248) 624 5500 or email@example.com