https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html https://www.hhs.gov/hipaa/filing-a-complaint/complaint-proce... Complaint Requirement

https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html https://www.hhs.gov/hipaa/filing-a-complaint/complaint-proce... Complaint Requirements Anyone can file a health information privacy or security complaint. Your complaint must: Be filed in writing by mail, fax, e-mail, or via the OCR Complaint Portal Name the covered entity or business associate involved, and describe the acts or omissions, you believed violated the requirements of the Privacy, Security, or Breach Notification Rules Be filed within 180 days of when you knew that the act or omission complained of occurred. OCR may extend the 180-day period if you can show "good cause"