How do I file a complaint about a HIPAA violation?
Complaints go to the U.S. Department of Health and Human Services' Office for Civil Rights. The Office for Civil Rights investigates complaints againstmany different types of entities, including national pharmacy chains, major medical centers, group health plans, hospital chains, and small provider offices. However, the office tells consumers that it "cannot look into all civil rights or privacy complaints."
Complaints must bemade in writing. You can download a complaint form from www.hhs.gov/ocr and follow the link marked: "How to file a health-information privacy complaint." Complaints typically must be filed within 180 days of a violation.