Office of Administrative Counsel & Rules

Health Insurance Portability and Accountability Act of 1996 (HIPAA)

What is HIPAA?

The Title II provisions of HIPAA, known as the Administrative Simplification regulations, mandate:

  • National privacy standards for the creation, use, disclosure, and retention of patient identifiable health information; and
  • Data security and integrity requirements for the maintenance and transmission of patient information.

For more HIPAA details, visit the U.S. Department of Health and Human Services Office for Civil Rights (OCR) website.

ADHS HIPAA Complaints

If you have a HIPAA complaint or concern involving one of the ADHS HIPAA covered components or its business associate (an entity that has a business associate agreement with an ADHS covered component), please contact ADHS HIPAA for reporting instructions.

You also can file a HIPAA complaint with OCR for a concern related to ADHS. While OCR will accept all HIPAA complaints, OCR encourages individuals to try to resolve a HIPAA concern directly with the HIPAA covered entity or its business associate.

Any complaint filed with OCR for a requested investigation must be received by OCR within 180 days of the date of the alleged violation. The 180 day time limit applies regardless of whether the matter is filed initially with OCR or after receiving a response from ADHS.