Care first. Seek urgent medical or dental attention for serious or worsening symptoms. Researching or preparing a complaint should never delay treatment.

Vermont · Insurance, records, or privacy

Vermont: insurance, records and privacy

Records, privacy, civil rights, and insurance use different processes. Choose the issue and, for coverage concerns, confirm the plan type. State insurance filing guidance appears separately below.

Choose the process

What do you need help with?

Your state and an insurer’s name alone do not identify the correct process.

A provider bill or refund

Ask the provider for an itemized bill and its review process. A provider charge differs from an insurer’s denial.

Sort a billing concern →

Authority and scope

State insurance complaint scope

Department of Financial Regulation (DFR), Insurance Division

The verification level applies to state insurance complaints only. DFR consumer complaint channels checked; form privacy/release terms and plan exclusions limited. Some filing instructions were checked, but complete instructions for every listed insurance route have not been verified. Read the limits for your route.

DFR’s insurance complaint instructions list major medical, dental, pharmacy-benefit, long-term-care and Medicare supplement coverage among its consumer complaint categories. Medicare supplement insurance is distinct from Medicare/Medicare Advantage. Confirm state regulation, funding and issuing jurisdiction for the particular health plan.

Supporting guidance: Vermont: consumer insurance complaints ↗

Choose the insurance process

DFR consumer insurance complaint

Online or paper/mail/fax consumer route; exact health-plan jurisdiction and form authorization/privacy requirements need confirmation.

Open this official route ↗
Submission

Checked steps and filing details to confirm

  • Use DFR’s online complaint option, or complete its insurance complaint form and mail to Department of Financial Regulation, Insurance Consumer Services, 89 Main Street, Montpelier, VT 05620-3101; fax 802-828-1446.
  • For help, call 800-964-1784 or email dfr.insuranceinfo@vermont.gov. The page lists email for assistance; it does not establish email as a completed formal complaint channel.
  • Providers submitting for a particular patient must obtain the insured’s authorization before DFR can contact the insurer. The full form’s required identifiers, signatures, health-information release and other representative terms were not readable; ask before sending another person’s records.

Supporting guidance: Vermont: consumer insurance complaints ↗

Limits

What this route may not provide

The readable instructions establish complaint channels, not every HMO, self-funded employer or public-plan boundary. Do not infer jurisdiction from the insurer’s brand or your residence. Detailed external-review eligibility/deadlines, financial remedies and privacy/records procedures were not established.

Anonymity

Do not guess about confidentiality

Anonymous acceptance, respondent disclosure, public-record protections and detailed medical-information releases were not established. Ask DFR before sending sensitive material.

Complaint timing

Complaint deadlines and appeal/external-review rules unverified.

No Vermont consumer-complaint filing cutoff was established. Contact DFR promptly, track any deadline printed in your denial notice and ask whether a separate appeal or review request is required. Do not assume a regulator inquiry preserves it.

Process

What may happen after filing

DFR describes online communication and supporting-document upload. Its complete acknowledgment, insurer-response, investigation and remedy rules were not established. Official indexed instructions were readable; direct page/form access was blocked, and submission was not tested.

Supporting guidance: Vermont: consumer insurance complaints ↗

Evidence

Prepare a reviewable submission

State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.

Records, privacy and other coverage processes

This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.

Records access and amendment

HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These periods run from receipt by the record holder. A denial must explain its basis and applicable review or disagreement options in writing. An accepted amendment may be appended or linked; it does not require erasing the original.

Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗

Privacy complaints and consent

HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.

Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗

Civil rights use a separate process

Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.

Supporting guidance: HHS OCR: civil-rights complaint process ↗

Match insurance help to the plan

Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.

Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗

Public employer health plans

State, county, school-district and municipal employer plans can be insured, self-funded or mixed, and follow different oversight rules from private-employer ERISA plans. CMS enforces applicable Public Health Service Act requirements for non-federal governmental plans and lists NonFed@cms.hhs.gov for questions and concerns. That contact is not a substitute for following the plan’s claim and appeal instructions. Federal employee and church-plan routes require separate confirmation.

Supporting guidance: CMS: non-federal governmental health plans ↗DOL EBSA: filing a claim for health benefits ↗

Medicare and Medicaid

Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.

Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗

National sources and scope

45 CFR 164.524: access to protected health information ↗

HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period. Relevant rule text read; eCFR Title 45 displayed as current through September 28, 2026.

Source checked: September 30, 2026

HHS OCR: health-information complaint process ↗

Current HIPAA and 42 CFR Part 2 complaint scope; awareness-based filing period, good-cause extensions, identity, consent and retaliation protections. Page reviewed February 20, 2026.

Source checked: September 30, 2026

DOL EBSA: filing a claim for health benefits ↗

ERISA-covered private-employer plans, government/most church exclusions, benefit claims and appeals, plan-document instructions and conditional external review.

Source checked: September 19, 2026

Medicare: appeals ↗

Distinct Original Medicare, Medicare Advantage/other plan and Part D appeal instructions; notices and fast appeals when covered care is ending.

Source checked: September 30, 2026

Medicaid.gov: state Medicaid and CHIP help ↗

State-program contacts for Medicaid/CHIP eligibility, enrollment and claim questions; this directory does not itself establish appeal procedures or deadlines.

Source checked: September 30, 2026

CMS: non-federal governmental health plans ↗

State/local governmental plan examples, insured and self-funded arrangements, CMS enforcement of applicable PHS Act requirements and questions/concerns contact. Page modified March 13, 2026; body text read.

Source checked: September 30, 2026

Sources and scope

Vermont: consumer insurance complaints ↗

Official indexed page text read: major medical/dental/Medigap categories, online/mail/fax channels, help contacts and provider-for-patient authorization; direct page/form blocked.

Source checked: September 30, 2026

Latest guide source check: September 30, 2026. Individual sources retain their own check dates. This records a review of the linked material, not a decision about your case. No clinical or legal reviewer is identified for this guide. Confirm current instructions with the receiving authority.

A state authority is one checkpoint—not the entire accountability system.

Compare the available routes →