HIPAA Violation Complaint Letter

Answer a few questions and we'll create your personalized letter.

Your Situation

Tell us about the HIPAA violation so we can tailor your complaint letter.

State where you reside

This determines which state health privacy law applies in addition to federal HIPAA.

What type of entity are you complaining about?

HIPAA applies to 'covered entities' (health plans, health care clearinghouses, and most health care providers) and their 'business associates.' If the entity is not a covered entity, your complaint may need to rely on state law instead.

Are you the patient or an employee?

I am the patient whose information was compromisedI am an employee who witnessed the violation

Patients have the right to file complaints about their own PHI. Employees can also file complaints about violations they witness.

Type of violation

Select the primary type of violation. Your letter will cite the specific HIPAA rule that was violated.

Which HIPAA rules were violated?

Privacy Rule (45 CFR Part 164 Subpart E) — unauthorized use or disclosure of PHISecurity Rule (45 CFR Part 164 Subpart C) — failure to protect electronic PHIBreach Notification Rule (45 CFR ss 164.400-414) — failure to notify of breach42 CFR Part 2 — substance abuse treatment records (stricter protections)

Select all that apply. Most complaints involve the Privacy Rule. If electronic records were involved, the Security Rule may also apply.