DHA Home About DHA Human Resources Contact Us FOIA Site Map
Skip Navigation LinksDHA Home > Clinical Operations and Patient Care > TMA Privacy Office > HIPAA > How to File a HIPAA Privacy Complaint
Infinite Menus, Copyright 2006, OpenCube Inc. All Rights Reserved.

How to File a HIPAA Privacy Complaint

If you believe that a military treatment facility (MTF) or other Military Health System (MHS) component, has violated your (or the rights of another individual) health privacy rights or committed a violation of the HIPAA Privacy Rule, you may file a written complaint with your local MTF HIPAA Privacy Officer. If you feel the issue has not been, or cannot be appropriately addressed at the MTF level, you may file a complaint with the TRICARE Management Activity (TMA) Privacy and Civil Liberties Office (TMA Privacy Office).

Complaint Requirements

The below information may be communicated by letter, or by completing and signing the Health Information Privacy Complaint Form. Complaints to the MTF HIPAA Privacy Officer or the TMA Privacy Office must:

  1. be made in writing (electronic messages will not be accepted);
  2. identify the MTF or MHS component that is the subject of the complaint;
  3. describe in as much detail as possible, the act(s) or omission(s) believed to be in violation of the applicable requirements of the HIPAA Privacy Rule or MHS Notice of Privacy Practices (NoPP); and
  4. be filed within 180 days of when you knew that the act or omission occurred.

How to Submit your Complaint to the TMA Privacy Office

Please mail your letter or completed form to the TMA Privacy Office as appropriate. Mail the correspondence to:

TRICARE Management Activity
Privacy and Civil Liberties Office
7700 Arlington Boulevard, Suite 5101
Falls Church, VA 22041-5101

Upon receipt of your complaint, we will acknowledge it in writing and you will later be notified of either the results of the investigation of your complaint, or that additional time will be required to fully examine the issue and respond.

HIPAA Prohibits Retaliation

Under HIPAA an entity cannot retaliate against you for filing a complaint. In the event of any retaliatory action, you should notify the MTF HIPAA Privacy Officer or our office immediately.

“On October 1, 2013, the Department of Defense established the Defense Health Agency (DHA) to manage the activities of the Military Health System. These activities include those previously managed by TRICARE Management Activity (TMA), which was disestablished on the same date. During the next several months, all TMA websites will change to reflect the new DHA. We appreciate your patience during this transition."
DoD Seal
7700 Arlington Boulevard, Suite 5101, Falls Church, VA 22042-5101
The appearance of hyperlinks to external Web sites does not constitute endorsement by the TRICARE Management Activity of these Web sites or the information, products or services contained therein. For other than authorized government activities, TRICARE Management Activity does not exercise any editorial control over the information you may find at other locations. Such links are provided consistent with the stated purpose of this DoD Web site. Accessibility/Section 508