How to Report a Store for HIPAA Violations
- 1). Download the Office for Civil Rights Health Information Privacy Complaint form at the Office for Civil Rights official website (www.hhs.gov/ocr/); click on the top tab labeled "Health Information Privacy," then click on the link titled "How to File a Complaint" on the left side of the page. Or you can call 877-696-6775 and ask that a form be mailed, emailed or faxed to you.
- 2). Print out the form and write in all of the requested information. Forms filled out in their entirety are easier to process without delay.
- 3). Send your completed form to the appropriate Office for Civil Rights regional address listed on the bottom of your form. You can also email your form to OCRComplaint@hhs.gov. If you prefer to fax it back, use the fax number listed under the appropriate regional Office for Civil Rights location listed on your form.
- 4). Contact the Office for Civil Rights at 877-696-6775 or email OCRMail@hhs.gov if you need help filling out your complaint form. The Office for Civil Rights handles HIPAA complaints; there is no cost to call or email them for help.
- 5). If you prefer not to use the Office for Civil Rights complaint form, send a letter, fax or email to OCRComplaint@hhs.gov with the following information: your name; current full address; phone number; email address (optional); name of patient, reporter or provider whose information was allegedly compromised, if known; name, address and phone number of store you believe is responsible for compromising the information; description of how and why you believe the store is responsible; any other pertinent information you have; your written signature and date of your complaint.
Source...