U.S. HHS — Office for Civil Rights (OCR)

Enforces HIPAA and receives health-information privacy, security, and data-breach complaints. This is where the 2025 SimonMed data breach was reported. Complaints must generally be filed within 180 days.

• Phone: 1-800-368-1019
• Email: [email protected]
• Address: 200 Independence Ave. SW, Room 509F, Washington, DC 20201