Originally Posted by ratsnrip

Following the link for how to file a complaint, there is a section called "Before You File a Complaint". From the Health & Human Services, Office for Civil Rights page it clearly states: OCR cannot investigate complaints against entities that are not covered entities. These are NOT covered entities and are NOT required to comply with the Privacy and Security Rules: Employers

So you could use that form to file a complaint against your doctor/ health care provider, or insurance company for violating your HIPPA rights but not your employer.