Resources & Information

The HIPAA Privacy Rule is a federal regulation that sets standards to protect a patient’s medical record and other identifiable personal health information. The rule allows patients to find out how information may be used, limits the release of information, and gives patients the right to examine and obtain copies of their own health records. You can learn more at:

OCR Guidance for Consumers.
HIPAA FAQs for Individuals.

HIPAA is enforced by the Office for Civil Rights (OCR), which has authority over any covered entity, including hospitals and health care facilities, health care providers, and health insurance companies. You can file a complaint with the OCR online at this link here.

The North Carolina Medical Board does not have authority over all covered entities. It only has authority over physicians, physician assistants, anesthesiologist assistants, and perfusionists. For these providers, you may a file a complaint online here.
 
The Board also jointly regulates nurse practitioners with the NC Board of Nursing, but you should submit these complaints with the NC Board of Nursing here.

The Board also jointly regulates clinical pharmacists practitioners with the NC Board of Pharmacy, but you should submit these complaints with the NC Board of Pharmacy here.