· The complaint should be directed to the HIPAA compliance officer. Complaints can also be filed with the Office for Civil Rights. It is not a requirement to first report the incident to the covered entity. Patients can bypass this step submit a complaint to OCR about a privacy violation or another type of HIPAA violation that has come to their ....