UlekaiINFORMED CHOICES

Care first. Seek urgent medical or dental attention for serious or worsening symptoms. Researching or preparing a complaint should never delay treatment.

New York · Insurance, records, or privacy

New York: insurance, records and privacy

Records, privacy, civil rights, and insurance use different processes. Choose the issue and, for coverage concerns, confirm the plan type. State insurance filing guidance appears separately below.

Choose the process →State insurance complaints →

Choose the process

What do you need help with?

Your state and an insurer’s name alone do not identify the correct process.

A provider bill or refund

Ask the provider for an itemized bill and its review process. A provider charge differs from an insurer’s denial.

Sort a billing concern →

Authority and scope

State insurance complaint scope

New York Department of Financial Services (DFS); Department of Health (DOH) Managed Care Complaint Unit

The verification level applies to state insurance complaints only. DFS state-insurance instructions checked; separate HMO care-quality intake limited. Some filing instructions were checked, but complete instructions for every listed insurance route have not been verified. Read the limits for your route.

DFS handles state-regulated health-insurance complaints about payment, reimbursement, coverage, network adequacy, benefits and premiums. DOH separately handles HMO members’ quality-of-care concerns. The current state guide identifies that DOH contact, but its complete intake requirements were not established. These are health-plan oversight routes, not a universal health-information/privacy complaint service.

Supporting guidance: 2026 New York health-insurer guide ↗

Choose the insurance process

DFS state health-insurance complaint

State-regulated health-insurance payment, coverage, network and premium complaints.

Open this official route ↗

DOH HMO quality-of-care contact — intake limited

Separate HMO care-quality concerns; official state guide verifies the contact, but full filing requirements and privacy rules remain unverified.

Open this official route ↗
Submission

Checked steps and filing details to confirm

  • First raise the matter with the insurer. For DFS, use the Consumer Complaint application linked from its complaint page; it also supports case updates and status checks. A paper form is available; confirm its delivery destination with DFS at 800-342-3736 before mailing.
  • Identify insurer, insured and representative, policy/account/claim numbers, service date, amount, requested resolution, earlier company contacts and any attorney/court involvement. Attach copies of relevant notices, bills and correspondence; keep originals. Sign the paper declaration.
  • DFS links a separate representative authorization letter. It lasts one year, includes a notary block and warns that DFS cannot control subsequent use of records released to the representative. Confirm and complete the applicable authorization; the insurer-facing health-designee form is a different document.
  • For HMO quality-of-care concerns, the 2026 state guide lists DOH’s Managed Care Complaint Unit at 800-206-8125 and OHIP DHPCO 1CP-1609, Albany, NY 12237. Ask about the required form, supporting records and consent before sending sensitive information.

Supporting guidance: DFS consumer complaint instructions ↗DFS consumer complaint form ↗DFS representative authorization ↗2026 New York health-insurer guide ↗

Limits

What this route may not provide

Confirm the plan’s funding and governing state. The state guide excludes private ERISA self-insured coverage from New York insurance-law protections; Medicare and public-program matters require separate analysis. DFS enforces public protections and is not your private attorney. A complaint about a coverage decision and an external medical appeal are distinct.

Supporting guidance: 2026 New York health-insurer guide ↗DFS consumer complaint form ↗DFS external appeal instructions ↗

Anonymity

Do not guess about confidentiality

DFS may give the respondent your complaint and supporting information; the signed form acknowledges that sharing. Anonymous intake and broader public-record protections were not established. DOH complaint privacy rules remain unverified.

Supporting guidance: DFS consumer complaint instructions ↗DFS consumer complaint form ↗

Complaint timing

Complaint cutoff unestablished; external appeal has a separate four-month rule

A regulator-complaint filing deadline was not established by this check; ask promptly. Eligible DFS external appeals generally must arrive within four months of the final internal appeal determination or waiver; an optional second-level internal appeal does not extend that period.

Supporting guidance: DFS external appeal instructions ↗

Process

What may happen after filing

DFS permits complaint tracking and additional documents through its portal. The state guide says insurers must correct statutory or contractual noncompliance identified in state review. DOH’s detailed investigation and notification process remains unverified.

Supporting guidance: DFS consumer complaint instructions ↗2026 New York health-insurer guide ↗

Evidence

Prepare a reviewable submission

State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.

Read the linked authority and process information ↗

Records, privacy and other coverage processes

This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.

Records access and amendment

HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These periods run from receipt by the record holder. A denial must explain its basis and applicable review or disagreement options in writing. An accepted amendment may be appended or linked; it does not require erasing the original.

Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗

Privacy complaints and consent

HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.

Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗

Civil rights use a separate process

Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.

Supporting guidance: HHS OCR: civil-rights complaint process ↗

Match insurance help to the plan

Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.

Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗

Public employer health plans

State, county, school-district and municipal employer plans can be insured, self-funded or mixed, and follow different oversight rules from private-employer ERISA plans. CMS enforces applicable Public Health Service Act requirements for non-federal governmental plans and lists NonFed@cms.hhs.gov for questions and concerns. That contact is not a substitute for following the plan’s claim and appeal instructions. Federal employee and church-plan routes require separate confirmation.

Supporting guidance: CMS: non-federal governmental health plans ↗DOL EBSA: filing a claim for health benefits ↗

Medicare and Medicaid

Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.

Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗

Prepare a records request →Compare coverage assistance →Build a plan for your concern →

National sources and scope

45 CFR 164.524: access to protected health information ↗

HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.

Source checked: September 30, 2026

HHS OCR: health-information complaint process ↗

Current HIPAA and 42 CFR Part 2 complaint scope; awareness-based filing period, good-cause extensions, identity, consent and retaliation protections. Page reviewed February 20, 2026.

Source checked: September 30, 2026

DOL EBSA: filing a claim for health benefits ↗

ERISA-covered private-employer plans, government/most church exclusions, benefit claims and appeals, plan-document instructions and conditional external review.

Source checked: September 19, 2026

Medicare: appeals ↗

Distinct Original Medicare, Medicare Advantage/other plan and Part D appeal instructions; notices and fast appeals when covered care is ending.

Source checked: September 30, 2026

Medicaid.gov: state Medicaid and CHIP help ↗

State-program contacts for Medicaid/CHIP eligibility, enrollment and claim questions; this directory does not itself establish appeal procedures or deadlines.

Source checked: September 30, 2026

CMS: non-federal governmental health plans ↗

State/local governmental plan examples, insured and self-funded arrangements, CMS enforcement of applicable PHS Act requirements and questions/concerns contact. Page modified March 13, 2026; body text read.

Source checked: September 30, 2026

Sources and scope

Some agency-linked forms and destinations could not be read. Source-check dates apply to the material listed below; they do not establish that every linked portal was inspected or a complaint submitted.

Latest guide source check: September 19, 2026. Individual sources retain their own check dates. This records a review of the linked material, not a decision about your case. No clinical or legal reviewer is identified for this guide. Confirm current instructions with the receiving authority.

DFS state health-insurance complaint ↗DOH HMO quality-of-care contact — intake limited ↗Prepare the complaint

A state authority is one checkpoint—not the entire accountability system.

Compare the available routes →