SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/hipaa-ocr-complaint-process

Where do you file a HIPAA privacy complaint?

With the HHS Office for Civil Rights (OCR).

Start playing free

  1. With your state health department
  2. With the hospital's front desk only
  3. With the HHS Office for Civil Rights ✔

Why: Anyone who believes a covered entity or business associate broke HIPAA can file a complaint with OCR, part of HHS. Complaints generally must be filed within 180 days of when you knew about the problem.

Huh, didn't know that: A complaint must be in writing, on paper or electronically.

The dad joke
Why did the complaint form go to OCR? It wanted to be heard by the right people.
Like this card?
Play the game

References

Answer: With the HHS Office for Civil Rights. Anyone who believes a covered entity or business associate broke HIPAA can file a complaint with OCR, part of HHS. Complaints generally must be filed within 180 days of when you knew about the problem.

  1. HHS: Filing a Health Information Privacy Complaint www.hhs.gov/hipaa/filing-a-complaint/index.html
    You may file a complaint with the Office for Civil Rights (OCR) if you believe
    Checked 2026-10-10.
  2. 45 CFR 160.306 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-160/subpart-C/section-160.306
    A complaint must be filed within 180 days of when the complainant knew or should have known
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Work SkillsWhat is a HIPAA breach?Work SkillsIs every impermissible PHI disclosure a breach?Work SkillsHow many factors are used in a HIPAA breach risk assessment?

That's stuff everyone should know.