I believe my private health information has been shared without my permission/my rights have been violated under HIPAA. How can I file a complaint?

We are very sorry to hear that your health information may have been shared without your permission. We hope the resources below will help you access important information about HIPAA and understand the process for filing a HIPAA violation complaint. 

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that sets limits on how and to whom your private health information can be shared. In general, HIPAA requires that health providers get your approval (consent) before sharing your private health information with another person. To learn more about HIPAA and how it protects your private health information, please visit the U.S. Department of Health and Human Services HIPAA webpage. You may also wish to consult NAMI’s webpage Understanding What HIPAA Means for Mental Illness. 

If you believe that your rights under HIPAA have been violated, you can file a complaint with the Office for Civil Rights (OCR). Visit the U.S. Department of Health and Human Services Filing a HIPAA Complaint webpage to learn about the steps for filing a complaint and what you can expect throughout the process. Please note that all complaints must: 

• Be filed in writing by mail, fax, e-mail, or via the OCR Complaint Portal 

• Name the covered person or business involved 
• Describe the acts that you believe violated HIPAA 
• Be filed within 180 days of the date that you learned about the HIPAA violation  

If you do not wish to file the complaint online, you can find instructions for filing by mail, fax, or e-mail here. 

Hours of operation Monday-Friday, 10 a.m. – 10 p.m. EST  

Call: 800-950-NAMI (6264)  

Text: 62640  

Webchat: www.nami.org/help   

Email: helpline@nami.org