HHS OCR health-information privacy complaint enforcement
HHS OCR maintains the federal complaint pathway for HIPAA, breach-notification, and Part 2 health-information privacy concerns, including complaints filed for oneself or for someone else.
Federal · Active · Implementation Feb 13, 2026
What it is
- What changed
- HHS OCR complaint materials say people may file if a covered entity or business associate violated their or someone else's health-information privacy rights, that OCR can investigate HIPAA and Part 2 complaints against regulated entities, and that the OCR portal supports complaints filed for oneself or for someone else.
- Why it matters
- Caregivers often discover privacy and access problems while trying to coordinate care; this row gives the official federal enforcement route without treating a complaint as immediate access authority or individualized HIPAA advice.
- Who it touches
- Family caregivers, Care providers and plans, People receiving carepatients, family caregivers, personal representatives, people seeking substance use disorder treatment, health-care providers, health plans
- What it does
- Gives people a right or protection
Sources
Last reviewed Jul 4, 2026. This is information, not legal advice; check the source for the current text.