{"id":17549,"date":"2022-05-20T17:55:28","date_gmt":"2022-05-21T00:55:28","guid":{"rendered":"https:\/\/www.unsilenced.org\/?page_id=17549"},"modified":"2022-05-20T18:04:07","modified_gmt":"2022-05-21T01:04:07","slug":"hipaa-complaint-instructions","status":"publish","type":"page","link":"https:\/\/www.unsilenced.org\/hipaa-complaint-instructions\/","title":{"rendered":"HIPAA Complaint Instructions"},"content":{"rendered":"
<\/div><\/div><\/span>

HIPAA Complaint Instructions<\/h1><\/span>
<\/div><\/div><\/div>
<\/div><\/div>

If a facility refuses to provide your full records, please use this guide to file a HIPAA complaint to The Office of Civil Rights (OCR). Use this ONLY after you have formally requested your records and have been denied or refused.<\/p>\n

Please note, you must give a facility 30 days to send your records. You may visit this site<\/a> <\/b>to understand your rights to access records.\u00a0 <\/b><\/p>\n

What you will need<\/b><\/h3>\n
    \n
  1. PDFs of all emails between the facility and the requestor regarding the records request. To create a PDF of an email, begin by clicking the print icon. Instead of picking a \u201cdestination\u201d that is a printer, select \u201cSave as PDF\u201d.\n
      \n
    1. This will be easier on a computer than on a phone.<\/li>\n
    2. Also be sure to save any other PDFs related to your records request such as any forms the facility sent you (even if you did not sign them).<\/li>\n<\/ol>\n<\/li>\n
    3. All dates of email correspondence<\/li>\n
    4. A written summary of what you believe is relevant to your complaint.<\/li>\n
    5. The address of the facility.<\/li>\n<\/ol>\n<\/div>

      Filing the complaint<\/b><\/h3>\n

      1. Navigate to https:\/\/ocrportal.hhs.gov\/ocr\/cp\/wizard_cp.jsf<\/strong><\/a>, click the File a Health Information Privacy Complaint<\/em> link, and enter your information.<\/p>\n

      \"\"<\/p>\n

      2. Choose the Agency\/Organization<\/em> radio field and type the name of the facility.<\/p>\n

      \"\"<\/p>\n

      3. Enter the rest of the facility\u2019s information including address and phone number. Be sure to use the facility\u2019s full legal name, not an abbreviation.<\/p>\n

      4. For the When do you believe that the violation of health information privacy rights occurred?<\/em> field, enter all dates from email correspondence as violation dates. Add additional dates as needed.<\/p>\n

      \"\"<\/p>\n

      5. Enter your written summary of all events surrounding the denial of the records that you have requested over 30 days ago. Here is what we recommend you include:<\/p>\n