Virginia Insurance, records, or privacy Complaint Route

Authority and scope

State insurance complaint scope

State Corporation Commission, Bureau of Insurance; Office of the Managed Care Ombudsman

The verification level applies to state insurance complaints only. Complaint instructions checked against the linked sources, with limitations and known conflicts. Confirm that the authority covers your concern.

BOI reviews complaints about Virginia-issued insurance policies, including regulated health coverage. Its Managed Care Ombudsman assists members of managed-care health insurance plans, including HMOs and PPOs, with rights and appeals. Check where the policy was issued and how the plan is funded.

Supporting guidance: BOI complaint instructions ↗Managed Care Ombudsman ↗

Choose the insurance process

Virginia Bureau of Insurance health-insurance complaint

For Virginia-issued, state-regulated health insurance, including regulated managed-care plans; verify funding and issuing state.

Open this official route ↗

Submission

How the official source says to file

Use the complaint page’s online portal with an email address, retain the case number and submit uploaded documents/comments through the portal. BOI does not accept complaints by phone or email. Assistance: 877-310-6560.
Alternatively, complete the Life and Health Complaint/Appeal Form and mail it to Bureau of Insurance, P.O. Box 1157, Richmond, VA 23218, or fax 804-371-9944. Identify insurer, insured, policy/certificate, employer/group, dates, facts and requested help; include supporting copies.
The insured signs the authorization; a parent/legal guardian signs for a minor. Read the separate representative authorization and its exceptions. The form permits sharing the complaint and attachments with respondents and agencies and obtaining/disclosing related medical records to BOI and the insurer. If a lawyer represents you, the webpage requests the lawyer’s written permission.

Supporting guidance: BOI complaint instructions ↗Life and Health Complaint/Appeal Form ↗

Limits

What this route may not provide

The complaint page excludes self-insured employer health/welfare plans, Commonwealth employee coverage, federal employee plans, Medicare, Medicaid and military plans. BOI checks legal and policy compliance but does not decide medical issues, disputed facts, damages or pending litigation, or force benefits outside policy terms.

Supporting guidance: BOI complaint instructions ↗

Anonymity

Do not guess about confidentiality

This is a named, authorized process with disclosure to the insurer and potentially other regulated entities or government agencies. The checked sources do not establish anonymous intake or complete public-records rules.

Supporting guidance: Life and Health Complaint/Appeal Form ↗

Complaint timing

No general complaint filing cutoff established; coverage appeals have separate requirements.

The checked sources do not establish a general consumer-complaint filing deadline. Ask promptly and preserve the insurer’s appeal deadline; do not assume filing with BOI extends it.

Process

What may happen after filing

BOI obtains and reviews the company’s response against law and policy and explains its findings. The Managed Care Ombudsman can assist with an adverse managed-care decision using the same signed form; call 877-310-6560, option 3. This assistance is distinct from independent external review.

Supporting guidance: BOI complaint instructions ↗Managed Care Ombudsman ↗

Evidence

Prepare a reviewable submission

State the concern you want reviewed, give a short chronology and factual consequences, and explain your request. Keep supporting records and follow the receiving authority’s instructions before attaching or sending them.

Read the linked authority and process information ↗

Records, privacy and other coverage processes

This national guidance applies within each process’s stated scope. It does not verify every state’s records or privacy laws, establish state insurance filing requirements, or change the state verification level above.

Records access and amendment

HIPAA access generally covers a covered provider’s or health plan’s designated record set, with exceptions such as separately maintained psychotherapy notes. Access and amendment are different requests: access generally requires action within 30 days; amendment within 60 days. Each permits one written, explained 30-day extension. These are record-holder response periods. An accepted amendment may be appended or linked; it does not require erasing the original.

Supporting guidance: 45 CFR 164.524: access to protected health information ↗45 CFR 164.526: amendment of protected health information ↗

Privacy complaints and consent

HHS OCR accepts qualifying HIPAA and substance-use-record confidentiality complaints. Generally file within 180 days after you knew or should have known of the alleged violation; OCR may extend for good cause. OCR requires your name and contact information. Read its consent form: your identity may be disclosed, withholding consent can limit investigation, and legally permitted disclosures or referrals can occur. Covered retaliation is prohibited; report suspected retaliation to OCR. Filing does not guarantee enforcement or a personal remedy. The webpage and linked packet list different mail and email details; use the current process page and confirm the delivery instructions.

Supporting guidance: HHS OCR: health-information complaint process ↗HHS OCR: privacy complaint and consent packet ↗

Civil rights use a separate process

Discrimination or access concerns in covered health or human-services programs use OCR’s separate civil-rights instructions. A privacy complaint does not automatically raise a civil-rights claim.

Supporting guidance: HHS OCR: civil-rights complaint process ↗

Match insurance help to the plan

Ask the benefits administrator whether coverage is insured or self-funded. EBSA assists with ERISA-covered private-employer plans; both fully insured and self-funded private-employer plans can be covered. State insurer oversight and ERISA claim protections can coexist. Government and most church plans differ. A regulator complaint and a coverage appeal are separate. Follow the denial notice and plan documents; do not assume a complaint preserves an appeal deadline. External review depends on the plan, dispute and applicable process, rather than being available for every denial.

Supporting guidance: DOL EBSA: filing a claim for health benefits ↗DOL: group health plan fiduciary responsibilities ↗

Medicare and Medicaid

Medicare appeal instructions depend on the coverage involved. For Medicaid or CHIP, use the decision notice and state program to identify the applicable appeal, review or hearing route. If care is urgently needed or ending, promptly check the notice’s expedited-review instructions instead of relying on a routine complaint.

Supporting guidance: Medicare: appeals ↗Medicaid.gov: state Medicaid and CHIP help ↗DOL EBSA: filing a claim for health benefits ↗

National sources and scope

45 CFR 164.524: access to protected health information ↗

HIPAA designated-record-set access, exclusions and denials, format, fees and the record holder’s response period.