How to Report a HIPAA Breach

HIPAA safeguards the confidentiality of your personal health information. As a result, a violation arises when someone or something illegally reveals your personal health information to another party without your authorization.

Violations occur more often than you may expect. HIPAA breaches include the following:

Your doctor or healthcare provider revealed information to a family member who has no business knowing about your medical condition.
If your doctor discards a copy of your medical documents inappropriately, they may be in breach of HIPAA.
A HIPAA violation might result from an unintentional swap of medical files.
A security breach might also be considered a HIPAA violation if another party gained access to your personal information.

There are several more instances of possible HIPAA breaches. If you suspect your HIPAA rights have been violated, you may consult with an attorney.

You may register a complaint with the Office for Civil Rights to report a HIPAA violation. It is important to note that they only examine allegations against “covered entities” such as your doctor, hospital, or health care provider. Within 180 days of the violation, you must file a written complaint that describes both the violation and the perpetrator.

Sign your complaint and fax or send it to the Office of Civil Rights in the region where the violation occurred. You may also send an email to [email protected].