The primary place to report a doctor is your state medical board. Every state has one, and their main function is to detect and discipline unprofessional or unethical conduct by physicians. Beyond the state board, you may also need to file with federal agencies or other organizations depending on what happened. The right place to report depends on the type of concern: substandard care, privacy violations, billing fraud, or something that occurred at a specific hospital each have different reporting channels.
Your State Medical Board
State medical boards exist specifically to protect patients. They have the authority to investigate complaints, discipline physicians, and in serious cases, suspend or revoke a doctor’s license. Some boards allow anonymous reporting, and many now accept complaints through online portals. You can find your state’s board by searching “[your state] medical board complaint” or visiting the Federation of State Medical Boards website, which links to every state board.
Once you file, the process generally follows a predictable path. The board notifies the doctor that a complaint exists and asks for a written response or conducts an interview. Staff and medical directors evaluate the case and make recommendations, which go before an investigative committee. That committee reviews the evidence and recommends action. Finally, the full board makes a decision. If the doctor disputes the outcome, the case can go to a formal hearing before an administrative law judge. The entire process can take months, sometimes longer for complex cases.
Board actions range from warnings to temporary suspension to permanent removal from the medical register. These are administrative actions, not lawsuits. The board’s goal is to determine whether the doctor is safe to keep practicing, not to award you money.
What to Include in Your Complaint
A well-documented complaint moves faster and carries more weight. Based on the checklist used by the North Carolina Medical Board (which is representative of most states), you should prepare the following before filing:
- Your contact information: full name, address, daytime phone number, and email
- Patient information: the patient’s name, date of birth, and your relationship to them if you’re filing on someone else’s behalf
- Doctor’s details: full name, license type (MD, DO, PA), area of practice, specialty, and phone number
- Incident details: a concise account of your concern, including the date or timeframe, and the full name and address of the practice or hospital where it occurred
- Medical records references: names, addresses, and phone numbers for every provider, facility, or hospital involved in the care related to your complaint, along with dates of service
Write your account clearly and stick to facts: what happened, when, and where. Boards review hundreds of complaints, and a focused, chronological narrative is far more useful than a long emotional letter.
Reporting Privacy Violations
If a doctor or their office improperly shared your medical records, disclosed your health information without consent, or failed to protect your data, you file with a different agency. The Office for Civil Rights at the U.S. Department of Health and Human Services handles HIPAA complaints. Anyone can file, whether you’re the patient affected or someone who witnessed the violation. You can submit your complaint through the OCR’s online portal at hhs.gov.
HIPAA complaints cover a broad range of issues: a receptionist discussing your diagnosis in a waiting room, a doctor sharing your records with someone who shouldn’t have them, or a clinic failing to secure electronic health records. The OCR investigates these separately from any state board action.
Reporting Medicare or Medicaid Fraud
If you suspect a doctor is billing for services never provided, upcoding (charging for more expensive procedures than what was done), or committing other insurance fraud involving government programs, report it to the HHS Office of Inspector General. Their hotline accepts tips from anyone about potential fraud, waste, or abuse in HHS programs, including Medicare and Medicaid. You can submit a complaint through the OIG’s website at oig.hhs.gov or call their hotline.
Reporting Within a Hospital
When the problem involves care at a hospital or clinic accredited by the Joint Commission, you can report directly to that organization. The Joint Commission oversees patient safety standards at thousands of healthcare facilities, and they investigate complaints about accredited organizations.
The preferred method is their online submission form. You can also report by phone at 1-800-994-6610 or by mail to their Office of Quality and Patient Safety in Oakbrook Terrace, Illinois. They do not accept faxed, emailed, or in-person complaints. One important note: do not send copies of medical records, photos, or billing invoices, as they will be shredded on arrival.
Most hospitals also have their own internal grievance process. Starting there can sometimes resolve issues faster, though it doesn’t prevent you from also filing with the state board or Joint Commission.
Time Limits for Filing
State medical boards generally don’t have the same strict deadlines as lawsuits, but filing promptly strengthens your complaint. Memories fade, records get harder to gather, and some boards do have internal policies about how far back they’ll investigate.
If you’re considering a civil malpractice lawsuit alongside a board complaint, timelines matter much more. These vary significantly by state. In Texas, for example, you must file a health care liability claim within two years of when the incident occurred or when treatment ended. There’s also an absolute cutoff of 10 years, after which claims are permanently barred. Minors under 12 have until their 14th birthday. Other states have their own windows, typically ranging from one to three years. Check your state’s specific statute of limitations if legal action is on the table.
Board Complaints vs. Malpractice Lawsuits
These are two completely separate processes with different purposes. A board complaint asks the state to evaluate whether a doctor should keep practicing. The possible outcomes are disciplinary: reprimands, required additional training, license restrictions, suspension, or revocation. Board complaints do not result in financial compensation to you.
A malpractice lawsuit is a civil legal action where you seek monetary damages for harm caused by a doctor’s negligence. You’d need to hire an attorney, and the case plays out in court or through settlement negotiations. You can pursue both simultaneously. Filing a board complaint doesn’t prevent you from suing, and suing doesn’t substitute for alerting the board if you believe other patients could be at risk.
Protections for People Who Report
If you’re a healthcare worker reporting a colleague, you have legal protections. Most states have immunity laws that shield anyone who reports suspected misconduct, abuse, or negligence in good faith. “Good faith” means you genuinely believe there’s a problem, even if the investigation ultimately doesn’t result in discipline.
Physicians have an ethical obligation to report impaired or dangerous colleagues and to intervene to ensure those colleagues stop practicing until they receive appropriate help. This isn’t optional under medical ethics guidelines. For nurses, technicians, and other staff who witness concerning behavior, the same good-faith immunity generally applies. Retaliation by an employer for filing a legitimate safety report can itself be a violation of whistleblower protections.
Checking a Doctor’s Record
The National Practitioner Data Bank tracks disciplinary actions, malpractice payments, and other adverse actions against physicians nationwide. However, direct public access to this database has historically been restricted to hospitals, insurance companies, and state boards. More than 30 state medical boards allow consumers to look up a doctor’s disciplinary history through the board’s own website. Search your state board’s site for a “license verification” or “physician lookup” tool to see whether a doctor has past disciplinary actions, license restrictions, or other red flags.