File a Complaint
The improved Administrative Simplification Enforcement and Testing Tool (ASETT) is available for use. You can use ASETT to file a complaint about alleged violations of the HIPAA Administrative Simplification requirements.
How to File a Complaint
To file your HIPAA transactions, code sets, unique identifiers (employer and provider Identifiers) or operating rules complaint electronically, go to the Administrative Simplification Enforcement Testing Tool (ASETT)
Prior to entering ASETT, each potential user must complete the one-time registration process to gain access to the system. This registration process is set up to protect the security of users’ information and collect the needed information to process a complaint. ASETT is fully integrated with CMS’ Enterprise Identity Management (EIDM) system and the CMS Enterprise Portal. Collectively, these tools provide ASETT users an additional level of security for filing complaints, and attaching supporting documentation and transactions, through Multi-Factor Authentication (MFA) and Remote Identity Proofing.
Learn more about ASETT with these resources:
File a Paper Complaint
To file a HIPAA Privacy Rule and Security Rule complaint, please contact the HHS Office for Civil Rights (OCR). OCR manages HIPAA privacy and security complaints and enforcement activities.