Part 2 complaint to the Secretary

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Current rule checkpoint

Live 42 CFR 2.4(b) states that a person may file a complaint with the Secretary about a Part 2 violation by a Part 2 program, covered entity, business associate, qualified service organization, or lawful holder in the same manner a HIPAA administrative-simplification complaint may be filed under 45 CFR 160.306. Internal complaint use is not stated as a prerequisite.

The rule names several respondent roles

42 CFR 2.4 includes programs, covered entities, business associates, qualified service organizations, and lawful holders. Record the alleged respondent and facts without assuming every organization has every listed status.

Internal and federal channels are separate

Explain internal contact options and the person's federal complaint right in accessible language. Avoid mandatory internal exhaustion, waivers, intimidation, deadline misinformation, or promises about the Secretary's outcome.

Preserve evidence and continuity

Log internal receipt when applicable, urgent privacy or safety routing, relevant policies, communications, records, access evidence, response, corrective action, and nonretaliation monitoring. Maintain treatment, payment, enrollment, and eligibility processes.

Explain the external right accurately

Provide current, accessible information about the right to complain to the Secretary, the organization types named in the rule, and the referenced federal procedure. Avoid guaranteeing jurisdiction, outcome, remedy, or timeliness. Do not tell a person that internal review, management approval, counsel contact, or withdrawal of another concern is required before external filing.

Offer language and disability access for the explanation without collecting unnecessary clinical facts.

Preserve the person's choice

Let the person decide whether to use internal, external, or both channels. Explain that the routes can proceed separately. Do not pressure the person to delay, narrow, withdraw, sign a confidentiality promise, or accept service recovery in exchange for silence. Record requests for assistance and representative authority through a protected process.

Keep treatment, payment, enrollment, and eligibility independent from complaint choice.

Build a protected evidence packet

Help identify dates, organization, involved roles, alleged Part 2 conduct, communications, notices, consents, disclosures, access, adverse action, and available documents. Preserve originals, screenshots, envelopes, logs, filenames, and delivery evidence. Minimize unrelated patient information and avoid creating a broad duplicate clinical file.

The filer or counsel determines what to submit. Internal staff should not edit the person's account to protect the organization.

Route government contact correctly

Authenticate any federal acknowledgment, request, investigator, matter number, deadline, and submission channel through a known route. Send it to restricted legal and compliance owners. Preserve the original contact, legal hold, response, exact production, interviews, correction, and outcome. Continue urgent patient and data protection while the matter is pending.

Separate cooperation and remediation from retaliation or discouragement.

Protect continuity and monitor outcomes

Track whether scheduling, treatment decisions, staff communications, billing, enrollment, eligibility, records access, discharge, or other services change after complaint activity. Require legitimate, documented reasons and independent review for adverse actions. Give the person a safe contact for urgent concerns.

Audit external-rights notices, complaint scripts, government intake, response time, evidence quality, correction, and recurrence. The 2024 final rule supplies current context while live procedure controls filing and response.

Assist without controlling the complaint

If the person asks for help, provide current public filing information, accessibility support, copies of records they are entitled to receive through the proper process, and a way to preserve materials. Distinguish translation or technical assistance from legal advice. Let the filer choose the narrative and submission.

Do not require a meeting with management, demand access to the draft, track the person's browser activity, or contact the federal office to discourage review. Record the assistance requested and delivered through a protected log.

Review public filing information regularly for accuracy.

Preserve each review date.

Example and controls

Nine complaint notices are reviewed. Seven identify the federal route, named respondent categories, internal option, nonretaliation, and assistance contact; two mention only internal reporting. Notice completeness is 7 of 9.

Secretary-complaint checklist

• explain the external right, named respondent roles, and procedural limits;
• keep internal and external channels independent and accessible;
• avoid delay, withdrawal pressure, waiver, or service conditions;
• preserve a minimized evidence record without rewriting the person's account;
• authenticate and route federal contacts, requests, and deadlines; and
• monitor service continuity, adverse action, correction, and recurrence.

The complaint route should remain understandable and safe to use. Organizational response begins with preservation, protected intake, and nonretaliation.