A person who believes a covered entity or business associate is not complying with the administrative simplification provisions of HIPAA may file a complaint with the Secretary of Health and Human Services (HHS).
(1) A complaint must be filed in writing, either on paper or electronically.
(2) A complaint must name the person that is the subject of the complaint and describe the acts or omissions believed to be in violation of the applicable administrative simplification provision(s).
(3) A complaint must be filed within 180 days of when the complainant knew or should have known that the act or omission complained of occurred. (This time limit may be waived by the Secretary if there is good cause).
