How to File a HIPAA Privacy Complaint
If you believe that a military treatment facility (MTF) or other Military Health System (MHS) component, has violated your (or the rights of another individual) health privacy rights or committed a violation of the HIPAA Privacy Rule, you may file a written complaint with your local MTF HIPAA Privacy Officer. If you feel the issue has not been, or cannot be appropriately addressed at the MTF level, you may file a complaint with the TRICARE Management Activity (TMA) Privacy and Civil Liberties Office (TMA Privacy Office).
The below information may be communicated by letter, or by completing and signing the Health Information Privacy Complaint Form. Complaints to the MTF HIPAA Privacy Officer or the TMA Privacy Office must:
- be made in writing (electronic messages will not be accepted);
- identify the MTF or MHS component that is the subject of the complaint;
- describe in as much detail as possible, the act(s) or omission(s) believed to be in violation of the applicable requirements of the HIPAA Privacy Rule or MHS Notice of Privacy Practices (NoPP); and
- be filed within 180 days of when you knew that the act or omission occurred.
How to Submit your Complaint to the TMA Privacy Office
Please mail your letter or completed form to the TMA Privacy Office as appropriate. Mail the correspondence to:
TRICARE Management Activity
Privacy and Civil Liberties Office
7700 Arlington Boulevard, Suite 5101
Falls Church, VA 22041-5101
Upon receipt of your complaint, we will acknowledge it in writing and you will later be notified of either the results of the investigation of your complaint, or that additional time will be required to fully examine the issue and respond.
HIPAA Prohibits Retaliation
Under HIPAA an entity cannot retaliate against you for filing a complaint. In the event of any retaliatory action, you should notify the MTF HIPAA Privacy Officer or our office immediately.