How to File a Patient Grievance or Complaint

Filing a patient grievance or complaint is a formal process through which patients — or their authorized representatives — report concerns about the quality, safety, or rights violations associated with healthcare they have received. Federal regulations and accreditation standards require hospitals, health plans, and other covered entities to maintain grievance procedures and respond within defined timeframes. Understanding the distinctions between complaint types, the agencies that receive them, and the procedural steps involved is essential for navigating the system effectively.

Definition and scope

A patient grievance is a written or verbal expression of dissatisfaction submitted by a patient or the patient's representative regarding care received from a hospital, health plan, or covered provider. The Centers for Medicare & Medicaid Services (CMS) defines the grievance process requirements for Medicare- and Medicaid-participating hospitals under the Conditions of Participation at 42 CFR §482.13(a), which establishes the right to have complaints reviewed and resolved.

A patient complaint is a broader term covering concerns raised with external bodies — including state licensing agencies, accreditation organizations, or federal regulators — rather than (or in addition to) the provider's internal process. The distinction matters because the procedural requirements, response timelines, and oversight bodies differ substantially between internal grievances and external complaints.

Scope extends across care settings: inpatient hospitals, outpatient clinics, skilled nursing facilities, health insurance plans, and federally qualified health centers. For concerns involving patient privacy rights under HIPAA, a separate complaint pathway exists through the HHS Office for Civil Rights. For billing-related disputes, the framework diverges further — see medical billing rights for that pathway.

How it works

The grievance and complaint process follows a structured sequence with distinct phases at both the provider and regulatory level.

Internal grievance process (provider level):

1. Submission — The patient or representative submits a grievance verbally or in writing to the provider's patient advocate, patient relations department, or grievance coordinator. Under 42 CFR §482.13, hospitals must inform patients of their right to file a grievance and provide the name, address, and phone number of the relevant state agency.
2. Acknowledgment — The hospital must provide written notice of receipt. CMS requires that the grievance be resolved, or that written notice of the steps being taken and a projected resolution date be provided, within 7 days for urgent matters.
3. Investigation — The grievance committee reviews the complaint, collects records, and interviews relevant staff.
4. Written resolution — A written response must include the name of the hospital contact, the steps taken to investigate, the results, and the date of completion (42 CFR §482.13(a)(2)).

External complaint process (regulatory level):

External complaints are filed directly with oversight bodies when internal resolution fails or when the concern involves a systemic rights violation. The patient rights enforcement agencies page outlines the principal bodies, which include CMS, state health departments, The Joint Commission (TJC), and the HHS Office for Civil Rights. TJC maintains a 24-hour complaint hotline and accepts complaints about accredited organizations online through its Office of Quality Monitoring.

For Medicare Advantage and Part D plan grievances, CMS requires health plans to follow procedures at 42 CFR Part 422 Subpart M and 42 CFR Part 423 Subpart M, which mandate 60-day filing windows and 30-day standard resolution periods.

Common scenarios

Grievances and complaints arise across a predictable set of categories. The following represent the most structurally common:

• Quality of care concerns — Alleged errors in diagnosis, treatment, or medication administration. These may be routed to state health departments and, for Medicare patients, to Quality Improvement Organizations (QIOs) under CMS's QIO Program.
• Rights violations — Denial of informed consent, failure to provide language access services, or discriminatory treatment. Anti-discrimination rights in healthcare and language access rights in healthcare are governed by Section 1557 of the Affordable Care Act, enforced by HHS OCR.
• Privacy breaches — Unauthorized disclosure of protected health information. Complaints go to HHS OCR under 45 CFR Parts 160 and 164 (the HIPAA Privacy Rule). OCR must receive complaints within 180 days of the alleged violation.
• Discharge disputes — Concerns about premature or inappropriate discharge. Medicare patients have the right to a fast-track appeal through a Beneficiary and Family Centered Care QIO; see hospital discharge rights for the full procedure.
• Billing and coverage disputes — Applicable when care is denied or billed incorrectly by an insurer. These are addressed under insurance grievance procedures governed by state insurance commissioners and, for marketplace plans, the ACA's internal and external review requirements.
• Restraint and seclusion — Governed under 42 CFR §482.13(e) and (f), with separate reporting obligations to CMS.

Decision boundaries

Knowing which pathway applies requires distinguishing between the type of concern, the setting, and the payer involved.

Internal grievance vs. external complaint: An internal grievance is the required first step at most provider organizations; however, external complaints can be filed simultaneously or independently. CMS does not require exhaustion of internal remedies before a patient files externally.

Medicare vs. private insurance: Medicare grievances follow federal CMS timelines and QIO appeal rights. Private insurance grievances are governed by state insurance law and, for employer-sponsored plans subject to ERISA, by the U.S. Department of Labor's Employee Benefits Security Administration (EBSA). ERISA plans are generally exempt from state insurance grievance mandates.

Accreditation-based complaints vs. licensing-based complaints: TJC accredits approximately 22,000 healthcare organizations in the United States (The Joint Commission, 2023 Annual Report). Complaints to TJC trigger a review of accreditation standards compliance, which is separate from — and may run parallel to — state licensing investigations.

Time limits: Filing windows vary significantly. HIPAA privacy complaints must reach HHS OCR within 180 days; Medicare fast-track discharge appeals must be filed no later than the day of discharge; state licensing complaint windows range from 1 to 3 years depending on jurisdiction.

Patients in nursing home settings face a parallel structure under the Long-Term Care Ombudsman Program, established under the Older Americans Act, which provides an independent advocate distinct from the facility's internal grievance process. For that setting, see rights in nursing home care.

References

• 42 CFR §482.13 — Condition of Participation: Patient Rights (eCFR)
• 42 CFR Part 422 Subpart M — Medicare Advantage Grievances (eCFR)
• 42 CFR Part 423 Subpart M — Part D Grievances (eCFR)
• HHS Office for Civil Rights — How to File a Health Information Privacy Complaint
• The Joint Commission — Office of Quality Monitoring / File a Complaint
• The Joint Commission — Facts About The Joint Commission (2023)
• CMS Quality Improvement Organization (QIO) Program
• U.S. Department of Labor EBSA — Filing a Claim
• 45 CFR Parts 160 and 164 — HIPAA Privacy Rule (eCFR)