UlekaiINFORMED CHOICES

Care first. Seek urgent medical or dental attention for serious or worsening symptoms. Researching or preparing a complaint should never delay treatment.

California · Insurance, records, or privacy

California: insurance, records and privacy

Records, privacy, civil rights, and insurance use different processes. Choose the issue and, for coverage concerns, confirm the plan type. State insurance filing guidance appears separately below.

Choose the process →State insurance complaints →

Choose the process

What do you need help with?

Your state and an insurer’s name alone do not identify the correct process.

A provider bill or refund

Ask the provider for an itemized bill and its review process. A provider charge differs from an insurer’s denial.

Sort a billing concern →

Authority and scope

State insurance complaint scope

Department of Managed Health Care (DMHC); California Department of Insurance (CDI)

The verification level applies to state insurance complaints only. DMHC health-plan filing instructions checked; separate CDI route limited. Some filing instructions were checked, but complete instructions for every listed insurance route have not been verified. Read the limits for your route.

California divides state health coverage between DMHC and CDI. DMHC regulates state-regulated HMOs and some other health plans, including specialized plans; its FAQ confirms that both agencies regulate Covered California products. Ask which agency regulates the actual policy. DMHC says it forwards cases belonging to CDI. CDI’s current filing instructions were inaccessible, so that substantial separate route remains limited.

Supporting guidance: California: DMHC complaint FAQ ↗California: DMHC plan types ↗

Choose the insurance process

DMHC-regulated health-plan complaint

Checked complaint/IMR instructions for DMHC plans; IMR is a distinct eligible clinical-review process.

Open this official route ↗

CDI-regulated health policy — filing limited

Separate insurance regulator; current consumer filing and release requirements unverified.

Open this official route ↗
Submission

Checked steps and filing details to confirm

  • For DMHC, ordinarily complain to the plan about each issue first and allow 30 days, or use DMHC when dissatisfied with its response. Serious health threats and experimental/investigational denials have exceptions; call 888-466-2219 promptly.
  • Use DMHC’s online option or signed IMR/Complaint Form. Mail to DMHC Help Center, 980 9th Street, Suite 500, Sacramento, CA 95814-2725, or fax 916-255-5241.
  • Identify patient, plan/member, employer, provider, disputed services and chronology. Supply relevant out-of-network medical records; the form explains which records the plan supplies. Use the authorized-assistant section when needed; an incapacitated patient’s representative must provide legal authority.
  • The release covers relevant medical and nonmedical information, including mental-health, substance-use and HIV records, from providers and the plan. It lasts one year, with stated continuing-use exceptions. DMHC shares information for review with the plan, reviewers and authorized agencies. Read the separate representative authorization before signing.
  • For a CDI-regulated policy, contact CDI’s consumer hotline, 800-927-4357, or its official entry to obtain current filing/consent instructions. Do not use DMHC’s form as a verified CDI complaint form.

Supporting guidance: California: DMHC complaint and IMR instructions ↗California: DMHC complaint/IMR and authorization form ↗NAIC: California Department of Insurance entry ↗

Limits

What this route may not provide

DMHC complaints address access, billing, cancellation and other health-plan issues; independent medical review (IMR) separately evaluates eligible clinical denials. Medicare, self-insured coverage and Medi-Cal fee-for-service are outside its IMR program. Do not generalize that exclusion to all Medi-Cal managed care, or assume a plan’s brand establishes jurisdiction. Provider discipline and records/privacy enforcement are distinct.

Supporting guidance: California: DMHC complaint and IMR instructions ↗California: DMHC complaint FAQ ↗

Anonymity

Do not guess about confidentiality

DMHC describes names and medical information as private under California law; published IMR decisions omit identifying information. That does not prevent authorized sharing for review. Anonymous acceptance and CDI’s complaint disclosure/release rules were not established.

Supporting guidance: California: DMHC complaint FAQ ↗California: DMHC complaint/IMR and authorization form ↗

Complaint timing

DMHC IMR: six months; routine complaint cutoff not established

The DMHC form generally requires IMR within six months after the plan’s written appeal response, with possible exceptions. This is not a general consumer complaint deadline. No routine DMHC or CDI complaint cutoff was established; check promptly and preserve separate appeal rights.

Supporting guidance: California: DMHC complaint/IMR and authorization form ↗

Process

What may happen after filing

DMHC screens the shared application for complaint or IMR eligibility, acknowledges a case and sends a closing letter. It describes ordinary complaints as about 30 days and IMR as about 45 days after qualification. It provides no routine status updates and asks that later documents be sent only when requested.

Supporting guidance: California: DMHC complaint and IMR instructions ↗

Evidence

Prepare a reviewable submission

State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.

Records, privacy and other coverage processes

This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.

Records access and amendment

HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These periods run from receipt by the record holder. A denial must explain its basis and applicable review or disagreement options in writing. An accepted amendment may be appended or linked; it does not require erasing the original.

Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗

Privacy complaints and consent

HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.

Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗

Civil rights use a separate process

Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.

Supporting guidance: HHS OCR: civil-rights complaint process ↗

Match insurance help to the plan

Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.

Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗

Public employer health plans

State, county, school-district and municipal employer plans can be insured, self-funded or mixed, and follow different oversight rules from private-employer ERISA plans. CMS enforces applicable Public Health Service Act requirements for non-federal governmental plans and lists NonFed@cms.hhs.gov for questions and concerns. That contact is not a substitute for following the plan’s claim and appeal instructions. Federal employee and church-plan routes require separate confirmation.

Supporting guidance: CMS: non-federal governmental health plans ↗DOL EBSA: filing a claim for health benefits ↗

Medicare and Medicaid

Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.

Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗

Prepare a records request →Compare coverage assistance →Build a plan for your concern →

National sources and scope

45 CFR 164.524: access to protected health information ↗

HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.

Source checked: September 30, 2026

HHS OCR: health-information complaint process ↗

Current HIPAA and 42 CFR Part 2 complaint scope; awareness-based filing period, good-cause extensions, identity, consent and retaliation protections. Page reviewed February 20, 2026.

Source checked: September 30, 2026

DOL EBSA: filing a claim for health benefits ↗

ERISA-covered private-employer plans, government/most church exclusions, benefit claims and appeals, plan-document instructions and conditional external review.

Source checked: September 19, 2026

Medicare: appeals ↗

Distinct Original Medicare, Medicare Advantage/other plan and Part D appeal instructions; notices and fast appeals when covered care is ending.

Source checked: September 30, 2026

Medicaid.gov: state Medicaid and CHIP help ↗

State-program contacts for Medicaid/CHIP eligibility, enrollment and claim questions; this directory does not itself establish appeal procedures or deadlines.

Source checked: September 30, 2026

CMS: non-federal governmental health plans ↗

State/local governmental plan examples, insured and self-funded arrangements, CMS enforcement of applicable PHS Act requirements and questions/concerns contact. Page modified March 13, 2026; body text read.

Source checked: September 30, 2026

Sources and scope

Some agency-linked forms and destinations could not be read. Source-check dates apply to the material listed below; they do not establish that every linked portal was inspected or a complaint submitted.

Latest guide source check: September 19, 2026. Individual sources retain their own check dates. This records a review of the linked material, not a decision about your case. No clinical or legal reviewer is identified for this guide. Confirm current instructions with the receiving authority.

DMHC-regulated health-plan complaint ↗CDI-regulated health policy — filing limited ↗Prepare the complaint

A state authority is one checkpoint—not the entire accountability system.

Compare the available routes →