who should hipaa complaints be directed to
Report HIPAA Violations and Complaints . HIPAA allows for two kinds of complaints about privacy violations: 1.) complaints directly to the entity where the violation occurred; and/or, 2.) complaints to the federal government, which are received by the Office for Civil Rights (OCR), a department of the U.S. Department of Health and Human Services (HHS). To report an alleged violation directly to the entity where the violation occurred, ask for the entity's Privacy Officer or HIPAA Officer.. You will typically be asked to submit your complaint in writing, along with some basic facts about the circumstances.