“Please call my daughter, not the number on the chart.” That sentence can matter more than a page of complaint detail. A useful grievance form captures the concern and gives staff a safe way to respond.
Key takeaways
- Let the patient describe the event in their own words and choose a safe contact route.
- Keep investigation notes and legal conclusions off the patient-facing form.
- Route urgent safety, privacy, billing, and service concerns to different owners.
- Track acknowledgement, response, and closure in a protected staff log.
This template is an operating aid, not legal advice. Hospital, ambulatory, payer, accreditation, state, federal, and contract rules can define complaints and grievances differently. Have counsel and the practice’s compliance, privacy, clinical, and patient-relations owners approve the local process.
Copyable patient-facing form
PATIENT CONCERN OR GRIEVANCE
Today's date: ____________________________________________
Patient name: ____________________________________________
Person submitting, if different: _________________________
Relationship or authority to speak for patient: __________
SAFE RESPONSE
Preferred method: phone / mail / portal / email / other
Safe phone or address: ___________________________________
May we leave a message? yes / no
Language or accessibility support requested: _____________
WHAT HAPPENED
Date and approximate time: _______________________________
Location, department, or visit: __________________________
People involved, if known: _______________________________
Please describe the concern in your own words:
__________________________________________________________
__________________________________________________________
Supporting material you want reviewed: ___________________
What response or resolution would you like? ______________
Signature, if required by local policy: __________________
Best time to contact you: _________________________________
FOR INTAKE ONLY
Received date, channel, and staff member: _________________
Reference number: ________________________________________
Don’t ask the patient to choose a legal category. “HIPAA violation,” “malpractice,” and “billing fraud” are conclusions staff may need to review. The form’s job is to preserve what happened, where, when, who was involved, and what response the person wants.
The four-lane intake card
One concern can need more than one route. A scheduling complaint may also reveal an unreviewed clinical message. A billing dispute may include a privacy allegation. Mark every applicable lane and appoint one coordinator so the patient isn’t sent around the building.
| Lane | Intake signal | Immediate owner | Intake action |
|---|---|---|---|
| Safety or clinical follow-up | New symptom, missed result, medication concern, abuse allegation, or immediate danger | Licensed clinical lead or emergency route | Separate urgent care from later grievance review |
| Privacy or records | Wrong recipient, access concern, disclosure, amendment, or records delay | Privacy officer or records lead | Preserve the allegation and relevant access evidence |
| Billing or coverage | Charge, estimate, claim, payment, or insurer dispute | Billing lead | Keep the service concern visible if one also exists |
| Service or conduct | Communication, delay, access, accommodation, staff conduct, or environment | Practice manager or patient-relations owner | Acknowledge and assign an investigator |
The intake person doesn’t decide whether an allegation is true. They protect the route, preserve evidence, and get urgent care needs to the right person now.
Hospitals have a specific federal rule
The Medicare Conditions of Participation require a hospital to establish a grievance process, tell patients whom to contact, review and resolve grievances, and provide a written notice with named elements. The regulation also addresses verbal and written grievances and governing-body oversight (42 CFR 482.13).
That hospital rule is not a universal script for every independent office. A medical practice may face different requirements from state law, health-plan contracts, professional rules, accreditation, or its own policy. Use the federal hospital rule only when it applies. For everyone else, it is a useful warning against copying a hospital deadline or definition without checking authority.
The staff log is a different document
The patient-facing form should be easy to complete. The staff log needs enough structure to prove that someone owned the concern.
GRIEVANCE WORK RECORD
Reference number: ________________________________________
Received date and channel: _______________________________
Safe-contact restriction copied from form: ______________
Routes opened: safety / privacy / billing / service / other
Urgent action and owner: __________________________________
Acknowledgement date and method: __________________________
Investigator: _____________________________________________
Questions to resolve: _____________________________________
Evidence locations: _______________________________________
Decision owner: ___________________________________________
Response requirement and source: __________________________
Response date and method: _________________________________
Corrective action owner and due date: _____________________
Closure evidence: _________________________________________
Don’t put a diagnosis, a full visit narrative, or copied chart pages into this log unless the approved process requires them. Link to protected evidence. Access to a service-recovery complaint doesn’t automatically justify access to the patient’s whole chart.
Write the acknowledgement before the conclusion
An acknowledgement says the concern was received, who owns the next contact, and how to share urgent new information. It doesn’t promise a result. If clinical follow-up is needed, keep it separate from the investigation so a patient isn’t waiting for committee review before getting care instructions.
The final response should follow the rule and policy that apply to the organization. Hospital requirements name specific written-notice elements in 42 CFR 482.13. An independent office shouldn’t claim those are its federal obligations without confirming scope.
Where a person wants to complain to a federal civil-rights or health-information-privacy regulator, the HHS Office for Civil Rights publishes its own complaint routes. Don’t obstruct that choice or imply the internal form replaces an external right.
Test the process with six awkward cases
Use fictional data and ask the intake team to route these without improvising:
- A patient requests a call but says voicemail isn’t safe.
- A family member submits the form and authority is unclear.
- A complaint about rudeness also reports a new medication reaction.
- A billing concern says records were sent to the wrong insurer.
- A person needs an interpreter and cannot use the web form.
- An anonymous note names a staff member but gives no date.
Score the process on safe contact, urgent escalation, authority check, route, evidence preservation, acknowledgement, and ownership. Don’t score whether staff made the complaint disappear quickly.
Communication after harm needs its own protocol
A grievance form is not an adverse-event investigation or disclosure plan. The Agency for Healthcare Research and Quality’s CANDOR toolkit treats event reporting, investigation, communication, resolution, and learning as a connected organizational process (AHRQ CANDOR). Organizations using that approach need trained leaders and approved procedures beyond a generic form.
When a grievance alleges harm, preserve the person’s words and activate the relevant safety process. Don’t let the service-recovery queue become the only record of a clinical event.
Software can route; people still decide
A practice system can assign a reference number, restrict access, preserve dates, send an acknowledgement, and remind an owner that a response is due. It cannot decide whether the practice violated a rule, whether a clinical explanation is sufficient, or what corrective action is fair.
Patient Square is an AI clinical platform. Practice Copilot brings the whole practice under one AI copilot: an ambient AI Medical Scribe that hands back a structured SOAP note, ICD-10 suggestions, and a prescription draft minutes after the visit, plus a bundled AI EHR, scheduling, and messaging as you move up the plan. Hospitals get Hospital Copilot.
Patient Square doesn’t claim a grievance-management module. If you’re evaluating the platform, test only the documented Practice Copilot scope and compare the security posture with your access and evidence requirements. The medical records release workflow and medical chart audit checklist cover two routes that may branch from a grievance.
The form opens the door. The log proves somebody walked through it.