How to File a Complaint

"If you believe that a covered entity violated your (or someone else's) health information privacy rights or committed another violation of the HIPAA Privacy or Security Rule, you may file a complaint with the Office for Civil Rights."

http://www.hhs.gov/ocr/privacy/hipaa/complaints/index.html