What is a Privacy Complaint? 

It’s a complaint by an individual about an act in relation to the individual's personal information that could be considered a breach of the relevant entity's privacy principles. 

What can be considered a Privacy Complaint? 

For a complaint to be considered a “privacy complaint,” the act must at least cover a breach of: 

• Personal collections  

• The sharing of personal information  

• The amount of personal information 

When it comes to privacy, HIPAA privacy rules cover a range of privacy definitions, requirements, and considerations. Before you file, check out our HIPAA Privacy Topic List.  

What to Expect from a Privacy Complaint? 

After you file your complaint, the Office of Civil Rights (OCR) will determine your complaint against the HIPAA rules. 

To file a DSHS privacy complaint, you must be able to provide the following information: 

• Your full name and contact information 

• An accurate description of your complaint 

• A summary of other steps taken 

You may file a health information privacy and security complaint with the Office for Civil Rights (OCR) if you feel a covered entity or business associate violated your (or someone else’s) health information privacy rights or committed another violation of the Privacy, Security or Breach Notification Rules. 

Not a DSHS Privacy Complaint? 

DSHS privacy office does not handle external complaints. To file an external complaint, please visit an external source.  

• English
• Spanish