Records or a correction
Start with the record holder’s access or amendment process.
Records checklist and request outline →Arizona · Insurance, records, or privacy
Arizona: insurance, records and privacy
Records, privacy, civil rights, and insurance use different processes. Choose the issue and, for coverage concerns, confirm the plan type. State insurance filing guidance appears separately below.
Choose the process
What do you need help with?
Your state and an insurer’s name alone do not identify the correct process.
Insurance coverage or an appeal
Identify the plan type and follow the decision notice.
Compare insurance assistance routes →Health-information privacy
Check whether HIPAA or substance-use confidentiality rules cover the organization and concern.
HHS privacy complaint process ↗Discrimination or communication access
Check the civil-rights process for the program and concern.
HHS civil-rights complaint process ↗A provider bill or refund
Ask the provider for an itemized bill and its review process. A provider charge differs from an insurer’s denial.
Sort a billing concern →A state-regulated insurance complaint
Check the plan’s regulator and keep complaint filing separate from an appeal deadline.
Read Arizona insurance complaint guidance →Authority and scope
State insurance complaint scope
Arizona Department of Insurance and Financial Institutions (DIFI)
The verification level applies to state insurance complaints only. Official DIFI complaint instructions checked; linked form, health appeals and detailed release terms limited. Some filing instructions were checked, but complete instructions for every listed insurance route have not been verified. Read the limits for your route.
DIFI reviews insurance claim handling, cancellations, refunds, underwriting and producer conduct within its jurisdiction. Its health section distinguishes an ordinary complaint from a health-care appeal. Identify the policy’s funding and issuing state before selecting a route.
Supporting guidance: Arizona: DIFI insurance complaint instructions ↗
Choose the insurance process
DIFI insurance complaint
Consumer complaint within DIFI jurisdiction; health-care appeal and surprise-bill routes are distinct.
Open this official route ↗Checked steps and filing details to confirm
- Use File a Complaint on the official DIFI page and select insurance. Scan relevant cards, policy and correspondence before starting: the page says attachments can be added only once.
- If acting for someone else, including a spouse, obtain DIFI’s linked Third Party Consent Form. The complete form and medical-release terms were not readable; ask DIFI at 602-364-3100 before sending another person’s records.
- The official instructions were readable in indexed text; direct page access was blocked. Exact live form fields and successful submission were not verified. Keep copies and any receipt.
Supporting guidance: Arizona: DIFI insurance complaint instructions ↗
What this route may not provide
DIFI’s complaint page excludes employer self-funded/COBRA, Medicare/Medicare Advantage, Medicaid/AHCCCS, military and listed federal/state employee benefits. It cannot act as your lawyer or resolve disputes requiring a judge/jury. State-regulated health-care appeals and surprise-bill processes have separate instructions; their eligibility and deadlines were not verified here.
Supporting guidance: Arizona: DIFI insurance complaint instructions ↗
Do not guess about confidentiality
DIFI warns that submitted complaints, responses and many related documents become public records. Anonymous acceptance and specific medical-information exemptions were not established. Do not assume an insurance complaint remains private.
Supporting guidance: Arizona: DIFI insurance complaint instructions ↗
A complaint does not extend other deadlines
DIFI expressly says a consumer complaint does not extend time limits in a policy, statute or regulation. No general complaint cutoff or completion target was established. Check the denial notice for a separate internal appeal/external review.
Supporting guidance: Arizona: DIFI insurance complaint instructions ↗
What may happen after filing
DIFI first checks jurisdiction, asks the insurance entity to respond, evaluates whether a law was violated and notifies the consumer when the case closes. These steps do not guarantee payment or reversal of a clinical denial.
Supporting guidance: Arizona: DIFI insurance complaint instructions ↗
Prepare a reviewable submission
State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.
Records, privacy and other coverage processes
This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.
Records access and amendment
HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These periods run from receipt by the record holder. A denial must explain its basis and applicable review or disagreement options in writing. An accepted amendment may be appended or linked; it does not require erasing the original.
Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗
Privacy complaints and consent
HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.
Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗
Civil rights use a separate process
Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.
Supporting guidance: HHS OCR: civil-rights complaint process ↗
Match insurance help to the plan
Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.
Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗
Public employer health plans
State, county, school-district and municipal employer plans can be insured, self-funded or mixed, and follow different oversight rules from private-employer ERISA plans. CMS enforces applicable Public Health Service Act requirements for non-federal governmental plans and lists NonFed@cms.hhs.gov for questions and concerns. That contact is not a substitute for following the plan’s claim and appeal instructions. Federal employee and church-plan routes require separate confirmation.
Supporting guidance: CMS: non-federal governmental health plans ↗DOL EBSA: filing a claim for health benefits ↗
Medicare and Medicaid
Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.
Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗
National sources and scope
45 CFR 164.524: access to protected health information ↗
HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.
Source checked: September 30, 2026
45 CFR 164.526: amendment of protected health information ↗
Amendment requests, permissible denials, response period, appended or linked amendments and statements of disagreement. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.
Source checked: September 30, 2026
HHS OCR: health-information complaint process ↗
Current HIPAA and 42 CFR Part 2 complaint scope; awareness-based filing period, good-cause extensions, identity, consent and retaliation protections. Page reviewed February 20, 2026.
Source checked: September 30, 2026
HHS OCR: privacy complaint and consent packet ↗
HHS-700 (07/2025): knew-or-should-have-known timing; representative consent; disclosure of identity, consent limits and legally permitted routine uses/referrals. PDF read in full.
Source checked: September 30, 2026
HHS OCR: civil-rights complaint process ↗
Separate civil-rights complaint process for covered health or human-services programs; filing and consent instructions.
Source checked: September 19, 2026
DOL EBSA: filing a claim for health benefits ↗
ERISA-covered private-employer plans, government/most church exclusions, benefit claims and appeals, plan-document instructions and conditional external review.
Source checked: September 19, 2026
Medicare: appeals ↗
Distinct Original Medicare, Medicare Advantage/other plan and Part D appeal instructions; notices and fast appeals when covered care is ending.
Source checked: September 30, 2026
Medicaid.gov: state Medicaid and CHIP help ↗
State-program contacts for Medicaid/CHIP eligibility, enrollment and claim questions; this directory does not itself establish appeal procedures or deadlines.
Source checked: September 30, 2026
DOL: group health plan fiduciary responsibilities ↗
ERISA can cover insured and self-funded private-employer plans; both must satisfy DOL benefit-claim standards. Not evidence of a universal external-review right.
Source checked: September 19, 2026
CMS: non-federal governmental health plans ↗
State/local governmental plan examples, insured and self-funded arrangements, CMS enforcement of applicable PHS Act requirements and questions/concerns contact. Page modified March 13, 2026; body text read.
Source checked: September 30, 2026
Sources and scope
Arizona: DIFI insurance complaint instructions ↗
Official indexed page text read: health complaint/appeal distinction, plan exclusions, preparation, third-party consent link, public records, no tolling and review/closure; direct fetch blocked.
Source checked: September 30, 2026
Latest guide source check: September 30, 2026. Individual sources retain their own check dates. This records a review of the linked material, not a decision about your case. No clinical or legal reviewer is identified for this guide. Confirm current instructions with the receiving authority.