Utah Insurance, records, or privacy Complaint Route

Authority and scope

State insurance complaint scope

Utah Insurance Department, Health Division

The verification level applies to state insurance complaints only. Complaint instructions checked against the linked sources, with limitations and known conflicts. Confirm that the authority covers your concern.

The Department’s health complaint route covers fully insured policies issued in Utah, including individual and insured employer coverage. Determine whether the insurer pays benefits or merely administers an employer self-funded plan. Policies issued elsewhere, employer self-funded coverage, Medicare Advantage and Medicaid have different routes. Ask the Health Division at 801-957-9280 if the plan type is unclear; public or church-plan arrangements require their own jurisdiction check.

Supporting guidance: Insurance complaint instructions ↗Consumer Complaint Form, April 2026 ↗

Choose the insurance process

Utah-regulated health-insurance complaint

Fully insured policies issued in Utah; Health Division complaint intake.

Open this official route ↗

Separate independent-review guidance

For eligible adverse benefit decisions; confirm whether the insurer or Department administers review.

Open this official route ↗

Submission

How the official source says to file

Use the complaint portal linked from the official page. It requires an account; retain your password to follow the case and exchange messages. If unable to use it, complete and sign the paper form.
For health complaints, email health@utah.gov, fax 385-465-6047, or mail Consumer Services, PO Box 146901, Salt Lake City, UT 84114-6901. Courier delivery uses 4315 South 2700 West, Suite 2300, Taylorsville, UT 84129.
Provide complainant/patient details and relationship, insurer, policy/claim numbers, employer, state of purchase, dates, amount disputed, attorney/litigation information, relevant parties and desired assistance. Include supporting copies and the denial notice; keep your originals.
The signed release authorizes receipt and disclosure of information, including protected health and financial information, needed for the investigation. For representation, section 7 requires signatures from both the person directly involved and the representative and allows sharing private/confidential information with that representative.

Supporting guidance: Insurance complaint instructions ↗Consumer Complaint Form, April 2026 ↗

Limits

What this route may not provide

The Department can review whether a claim was paid according to the policy and Utah law. It does not resolve disputed claim liability by forcing payment, and it says ordinary customer-service dissatisfaction is not regulated by insurance law. This is not a general medical-records, privacy or professional-discipline process.

Supporting guidance: Consumer Complaint Form, April 2026 ↗

Anonymity

Do not guess about confidentiality

Complaints are not accepted anonymously and may become public records. The complaint is forwarded to the respondent for a response. Secure portal transmission does not mean the insurer will not see it or that all complaint material is protected from disclosure.

Supporting guidance: Insurance complaint instructions ↗Consumer Complaint Form, April 2026 ↗

Complaint timing

Complaint timing differs from coverage-appeal and independent-review timing

A consumer-complaint cutoff was not established; ask promptly and preserve the separate appeal deadline in your notice. The form estimates initial contact in 1–2 business days and ordinary processing in 3–4 weeks; these are service estimates, not filing periods.

Supporting guidance: Consumer Complaint Form, April 2026 ↗

Process

What may happen after filing

The Department requests a response, reviews it and sends findings. Independent review is separate, generally after the carrier upholds a denial on internal appeal; the insurer or Department administers it depending on plan type.

Supporting guidance: Insurance complaint instructions ↗Independent review guidance ↗

Evidence

Prepare a reviewable submission

State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.

Records, privacy and other coverage processes

This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.

Records access and amendment

HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These are record-holder response periods. An accepted amendment may be appended or linked; it does not require erasing the original.

Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗

Privacy complaints and consent

HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.

Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗

Civil rights use a separate process

Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.

Supporting guidance: HHS OCR: civil-rights complaint process ↗

Match insurance help to the plan

Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.

Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗

Medicare and Medicaid

Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.

Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗DOL EBSA: filing a claim for health benefits ↗

National sources and scope

45 CFR 164.524: access to protected health information ↗

HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period.