The three online HIPAA violation reporting processes are the primary complaints portal for patients to use when they believe their rights have been violation, the secondary complaints portal that can be used by patients and members of a Covered Entities workforce to report HIPAA violations unconnected to patients´ rights, and the breach notification portal for Covered Entities to report unauthorized access to - or acquisition, use, or disclosure of - unsecured PHI. You can also contact HHS´ Office for Civil Rights via toll-free phone on 1-800-368-1019, via TDD text on 1-800-537-7697, or via email to OCRPrivacy@hhs.gov.