Skip to main content


U.S. flag
      An official website of the United States government
              Here’s how you know
        Here’s how you knowDot gov**Official websites use .gov**
                 A **.gov** website belongs to an official government organization in the United States.
                  HTTPS**Secure .gov websites use HTTPS**
                 A **lock** (A locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. 
  Menu Close
          Enter the terms you wish to search for.
    Search
        








  
  
    

  
      

                                      About HHS
    
                        
                              
      
      
      Programs & Services
    
                        
                              
      
      
      Grants & Contracts
    
                        
                              
      
      
      Laws & Regulations                  
Health Information Privacy
  HIPAA for Individuals
    
                        
                                            
      
      
      Filing a Complaint
    
                        
                                            
      
      
      HIPAA for Professionals
    
                        
                                            
      
      
      Newsroom

              

    



Breadcrumb
    HHS
                              HIPAA Home
                              HIPAA for Individuals
                              HIPAA FAQs for Individuals
                              352-If I believe that my privacy rights have been violated, when can I submit a complaint


    

    

    Navigate to:
  HIPAA for Individuals
                                            
            
            HIPAA & Reproductive Health
    
                                                  
                                            
            
      
      
      
      Mental Health & Substance Use Disorders
    
                                                                
                                                                  
            
      
      
      
      Your Rights Under HIPAA
                          
            
            Your Medical Records
    
                                                  
                                            
            
      
      
      
      Employers and Health Information in the Workplace
    
                                                  
                                            
            
      
      
      
      Personal Representatives
    
                                                  
                                            
            
      
      
      
      Family Members and Friends
    
                                                  
                                            
            
      
      
      
      Court Orders and Subpoenas
    
                                                  
                                            
            
      
      
      
      Notice of Privacy Practices
    
                                                  
                                            
            
      
      
      
      Right to Access
    
                                                  
                                            
            
      
      
      
      HIV and HIPAA
    
                                                  
                                            
            
      
      
      
      FAQsText resize icon

                    




If I believe that my privacy rights have been violated, when can I submit a complaint?








  
  
    

  
      





Answer:

By law, health care providers (including doctors and hospitals) who engage in certain electronic transactions, health plans, and health care clearinghouses, (collectively, “covered entities”) had until April 14, 2003, to comply with the HIPAA Privacy Rule. (Small health plans had until April 14, 2004, to comply). OCR provides further information on its web site abouthow to file a complaint.

Activities occurring before April 14, 2003, are not subject to the Office for Civil Rights (OCR) enforcement actions.
	After that date, a person who believes a covered entity is not complying with a requirement of the Privacy Rule may file with OCR a written complaint, either on paper or electronically.
	This complaint must be filed within 180 days of when the complainant knew or should have known that the act had occurred.
	The Secretary may waive this 180-day time limit if good cause is shown. See 45 CFR 160.306 and 164.534.In addition, after the compliance dates above, individuals have a right to file a complaint directly with the covered entity. Individuals should refer to the covered entity’s notice of privacy practices for more information about how to file a complaint with the covered entity.

Date Created: 12/20/2002

                    
  


Content created by Office for Civil Rights (OCR) Content last reviewed December 28, 2022Back to top
    Contact HHS
    
                        
                                            
      
      
      Careers
    
                        
                                            
      
      
      HHS FAQs
    
                        
                                            
      
      
      Nondiscrimination NoticeHHS Archive
    
                        
                                            
      
      
      Accessibility Statement
    
                        
                                            
      
      
      Privacy Policy
    
                        
                                            
      
      
      Viewers & PlayersBudget/Performance
    
                        
                                            
      
      
      Inspector General
    
                        
                                            
      
      
      Web Site Disclaimers
    
                        
                                            
      
      
      EEO/No Fear ActFOIA
    
                        
                                            
      
      
      The White House
    
                        
                                            
      
      
      USA.gov
    
                        
                                            
      
      
      Vulnerability Disclosure Policy
        Sign Up for Email Updates

Receive the latest updates from the Secretary, Blogs, and News Releases.

Sign Up
  HHS Headquarters
          200 Independence Avenue, S.W.
                  Washington, D.C. 20201
                  Toll Free Call Center: 1-877-696-6775​