Records or a correction
Start with the record holder’s access or amendment process.
Records checklist and request outline →Colorado · Insurance, records, or privacy
Colorado: insurance, records and privacy
Records, privacy, civil rights, and insurance use different processes. Choose the issue and, for coverage concerns, confirm the plan type. State insurance filing guidance appears separately below.
Choose the process
What do you need help with?
Your state and an insurer’s name alone do not identify the correct process.
Insurance coverage or an appeal
Identify the plan type and follow the decision notice.
Compare insurance assistance routes →Health-information privacy
Check whether HIPAA or substance-use confidentiality rules cover the organization and concern.
HHS privacy complaint process ↗Discrimination or communication access
Check the civil-rights process for the program and concern.
HHS civil-rights complaint process ↗A provider bill or refund
Ask the provider for an itemized bill and its review process. A provider charge differs from an insurer’s denial.
Sort a billing concern →A state-regulated insurance complaint
Check the plan’s regulator and keep complaint filing separate from an appeal deadline.
Read Colorado insurance complaint guidance →Authority and scope
State insurance complaint scope
Colorado Division of Insurance, Department of Regulatory Agencies
The verification level applies to state insurance complaints only. The authority has been identified from the linked sources. Complete filing instructions have not been checked. Confirm submission, privacy, timing, and oversight scope before filing.
The current NAIC insurance-department directory identifies Colorado Division of Insurance, Department of Regulatory Agencies, its official website and insurance consumer contacts. This establishes a state insurance authority entry, not verified complaint instructions for a particular health plan. The state website was inaccessible during this check. The scope of specific health-policy/HMO complaint routes could not be established from readable state instructions.
Supporting guidance: NAIC: Colorado insurance authority ↗
Choose the insurance process
State insurance authority — filing unverified
Official authority destination established by NAIC; confirm health-plan scope and current filing requirements.
Open this official route ↗Confirm the filing instructions
- Use the linked official agency entry or call 303-894-7490, listed in the NAIC directory, to request the current health-insurance consumer complaint instructions. This number is an assistance contact, not a verified complaint-submission channel.
- Ask which unit handles the specific insurer, plan and issue, and request its current form, accepted delivery methods and acknowledgment procedure. Portal, mail, email and fax filing requirements were not verified.
- For that conversation, prepare the insurer and plan name, member/policy and claim identifiers, denial notice, service dates, relevant correspondence and a brief chronology. This is preparation guidance, not a verified list of required state form fields.
- Ask whether the patient must sign, whether a representative needs written authorization, what medical-information release is required and which attachments should be copies. These requirements remain unknown.
Supporting guidance: NAIC: Colorado insurance authority ↗
What this route may not provide
Confirm whether the coverage is state-regulated, where the policy was issued and whether an employer funds claims. Do not assume that a familiar insurance-company name, an HMO label or residence in this state establishes jurisdiction. Separate analysis is needed for employer/public plans and Medicare or Medicaid. This limited entry does not map those processes or establish state enforcement authority over them.
Do not guess about confidentiality
Anonymous acceptance, public-record treatment, disclosure to the insurer and medical-information release terms were not established. Ask the agency before sending sensitive material; this entry makes no confidentiality promise.
Complaint and appeal deadlines not verified
No initial complaint cutoff, insurer-response period or regulator completion target was verified. Check promptly. A consumer complaint, internal coverage appeal and independent/external review are different processes; do not assume one filing satisfies or extends another.
What may happen after filing
Complaint screening, insurer response, investigation, available corrective action and final notice could not be verified. Ask the agency for those steps and preserve a copy of any instructions and proof of filing.
Prepare a reviewable submission
State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.
Records, privacy and other coverage processes
This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.
Records access and amendment
HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These periods run from receipt by the record holder. A denial must explain its basis and applicable review or disagreement options in writing. An accepted amendment may be appended or linked; it does not require erasing the original.
Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗
Privacy complaints and consent
HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.
Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗
Civil rights use a separate process
Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.
Supporting guidance: HHS OCR: civil-rights complaint process ↗
Match insurance help to the plan
Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.
Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗
Public employer health plans
State, county, school-district and municipal employer plans can be insured, self-funded or mixed, and follow different oversight rules from private-employer ERISA plans. CMS enforces applicable Public Health Service Act requirements for non-federal governmental plans and lists NonFed@cms.hhs.gov for questions and concerns. That contact is not a substitute for following the plan’s claim and appeal instructions. Federal employee and church-plan routes require separate confirmation.
Supporting guidance: CMS: non-federal governmental health plans ↗DOL EBSA: filing a claim for health benefits ↗
Medicare and Medicaid
Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.
Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗
National sources and scope
45 CFR 164.524: access to protected health information ↗
HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.
Source checked: September 30, 2026
45 CFR 164.526: amendment of protected health information ↗
Amendment requests, permissible denials, response period, appended or linked amendments and statements of disagreement. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.
Source checked: September 30, 2026
HHS OCR: health-information complaint process ↗
Current HIPAA and 42 CFR Part 2 complaint scope; awareness-based filing period, good-cause extensions, identity, consent and retaliation protections. Page reviewed February 20, 2026.
Source checked: September 30, 2026
HHS OCR: privacy complaint and consent packet ↗
HHS-700 (07/2025): knew-or-should-have-known timing; representative consent; disclosure of identity, consent limits and legally permitted routine uses/referrals. PDF read in full.
Source checked: September 30, 2026
HHS OCR: civil-rights complaint process ↗
Separate civil-rights complaint process for covered health or human-services programs; filing and consent instructions.
Source checked: September 19, 2026
DOL EBSA: filing a claim for health benefits ↗
ERISA-covered private-employer plans, government/most church exclusions, benefit claims and appeals, plan-document instructions and conditional external review.
Source checked: September 19, 2026
Medicare: appeals ↗
Distinct Original Medicare, Medicare Advantage/other plan and Part D appeal instructions; notices and fast appeals when covered care is ending.
Source checked: September 30, 2026
Medicaid.gov: state Medicaid and CHIP help ↗
State-program contacts for Medicaid/CHIP eligibility, enrollment and claim questions; this directory does not itself establish appeal procedures or deadlines.
Source checked: September 30, 2026
DOL: group health plan fiduciary responsibilities ↗
ERISA can cover insured and self-funded private-employer plans; both must satisfy DOL benefit-claim standards. Not evidence of a universal external-review right.
Source checked: September 19, 2026
CMS: non-federal governmental health plans ↗
State/local governmental plan examples, insured and self-funded arrangements, CMS enforcement of applicable PHS Act requirements and questions/concerns contact. Page modified March 13, 2026; body text read.
Source checked: September 30, 2026
Sources and scope
Some agency-linked forms and destinations could not be read. Source-check dates apply to the material listed below; they do not establish that every linked portal was inspected or a complaint submitted.
NAIC: Colorado insurance authority ↗
Read state directory entry identifies regulator, website and contact; no state filing instructions established.
Source checked: September 19, 2026
Latest guide source check: September 19, 2026. Individual sources retain their own check dates. This records a review of the linked material, not a decision about your case. No clinical or legal reviewer is identified for this guide. Confirm current instructions with the receiving authority.