Office of Administrative Counsel & Rules

Privacy - HIPAA - ADHS Complaints

If you have a HIPAA complaint or concern involving one of the ADHS HIPAA covered components or its business associate (an entity that has a business associate agreement with an ADHS covered component), please contact ADHS HIPAA for reporting instructions.

You also can file a HIPAA complaint with OCR for a concern related to ADHS. While OCR will accept all HIPAA complaints, OCR encourages individuals to try to resolve a HIPAA concern directly with the HIPAA covered entity or its business associate.

Any complaint filed with OCR for a requested investigation must be received by OCR within 180 days of the date of the alleged violation. The 180 day time limit applies regardless of whether the matter is filed initially with OCR or after receiving a response from ADHS.