Originally Posted by
Bobman80
Following the link for how to file a complaint, there is a section called "Before You File a Complaint". From the Health & Human Services, Office for Civil Rights page it clearly states: OCR cannot investigate complaints against entities that are not covered entities.
These are NOT covered entities and are NOT required to comply with the Privacy and Security Rules: Employers
So you could use that form to file a complaint against your doctor/ health care provider, or insurance company for violating your HIPPA rights but not your employer.