The Office for Civil Rights (OCR) enforces the HIPAA Privacy Rule, which protects the privacy of individually identifiable health information along with the confidentiality provisions of the Patient Safety and Quality Improvement Act. You can file civil rights, health infromation privacy, or patient safety confidentiality complaints with OCR, or someone else can file on your behalf. All complaints must be filed 180 days of when you believe your rights were violated. Complaints must be filed in writing: sent by mail, fax or email to the OCR Regional office.