Federal Oversight of Custody Health Care: DOJ Civil Rights Division (CRIPA), HHS Office for Civil Rights, CMS and the Death in Custody Reporting Act

Scope and warning#

This page maps the federal bodies whose authority reaches health care in local detention facilities in California — county jails, city jails and court holding facilities — with notes where the same authority reaches state prisons. For each body it states the ten elements of a regulatory pathway: jurisdiction; who may complain; what conduct is within scope; what evidence matters; what the body may do; what it cannot award; confidentiality and public-record issues; exhaustion consequences; deadline sources; and the official filing source, opened on the agency's own site for this page.

It does not repeat what other Roadmaps carry. The HHS Office for Civil Rights complaint mechanics — the jurisdiction and eligibility checklists, the complaint anatomy, the bracketed model, the post-filing process and the likely objections — are in Toolkit 128.1, and this page cross-refers rather than duplicates. The disability-discrimination law itself, including Title II, Section 504, the jail regulation and the damages standards, is in Roadmap 068. California's death-reporting statutes and the federal Death in Custody Reporting Act as they bear on a single death are in Roadmap 064. The California Attorney General's roles are in Roadmap 093. State and local oversight bodies are in Roadmaps 097 and 098; public records in Roadmap 087; accreditation and standards in Roadmap 088; reading settlements, consent decrees and monitor reports in Roadmap 048.1; and the full forum matrix in Roadmap 096.1.

The page states what each statute and regulation authorizes. It does not predict what any agency will do, characterize any agency's past action against any jail, or state that any jail, county, sheriff or health-care contractor has violated any federal law. Agency priorities and staffing change; the statutory text does not determine whether an agency acts on any report. Nothing here is legal advice. The page uses role vocabulary — detainee, prisoner, patient, complainant, personal representative, successor in interest — rather than the vocabulary of who may sue, because each statute defines its own participants.

The factual situation this roadmap addresses#

A generic hypothetical. A 52-year-old man who is profoundly deaf and has insulin-dependent diabetes is held pretrial for four months in a county jail whose health care is delivered by a private company under a county contract. He asks in writing, several times, for a sign-language interpreter at sick call; the responses say that written notes are sufficient. He later says that a clinician told housing officers his HIV status within earshot of other detainees and that he was harassed afterward. He is taken to a hospital emergency department in diabetic ketoacidosis, treated, and returned. He files a grievance about the interpreter but not about the disclosure, and he is released before the grievance is answered. His sister, who has followed the sheriff's website postings, has read that three other people died in the same jail during the year, and she has read a news report that the federal government once investigated a different county's jail. The family asks whether they can report to the federal government, which agency, what would happen, whether a federal investigation would help him get compensation, whether reporting satisfies anything he must do before suing, and whether the deaths they read about are counted anywhere federally. Nothing in this hypothetical describes any real person, facility, company or event.

Governing law#

The Civil Rights of Institutionalized Persons Act

What an "institution" is. The Act defines an "institution" as "any facility or institution" "which is owned, operated, or managed by, or provides services on behalf of any State or political subdivision of a State," and which is, among other categories, "a jail, prison, or other correctional facility," "a pretrial detention facility," or a facility for juveniles "held awaiting trial" (42 U.S.C. § 1997(1)(A)–(B)). Privately owned and operated facilities are excluded only where state licensing or receipt of federal benefit payments "constitutes the sole nexus between such facility and such State" (§ 1997(2)). "Person" includes "a corporation" (§ 1997(3)). Settled (statutory text). A county jail is within the definition on its face. The phrase "provides services on behalf of" a political subdivision is drafted to reach facilities whose operation is contracted; how it applies to a particular contracted service inside a county-operated jail is a question the text does not resolve. Analytical inference.

Who may sue, and for what. The operative grant is to one plaintiff: "Whenever the Attorney General has reasonable cause to believe that any State or political subdivision of a State, official, employee, or agent thereof, or other person acting on behalf of a State or political subdivision of a State" "is subjecting persons residing in or confined to an institution" "to egregious or flagrant conditions which deprive such persons of any rights, privileges, or immunities secured or protected by the Constitution or laws of the United States causing such persons to suffer grievous harm, and that such deprivation is pursuant to a pattern or practice of resistance to the full enjoyment of such rights," "the Attorney General, for or in the name of the United States, may institute a civil action in any appropriate United States district court against such party for such equitable relief as may be appropriate to insure the minimum corrective measures necessary" (42 U.S.C. § 1997a(a); AR-0961-F06, re-read on govinfo.gov for this page). For people in "a jail, prison, or other correctional facility" — the category in § 1997(1)(B)(ii) — equitable relief is available "only insofar as such persons are subjected to conditions which deprive them of rights, privileges, or immunities secured or protected by the Constitution of the United States" (§ 1997a(a)). The Attorney General "shall personally sign any complaint" (§ 1997a(c)). Settled (statutory text). Four features follow from the text. The plaintiff is the United States. The relief is equitable. The threshold is systemic — "egregious or flagrant," "grievous harm," "pattern or practice of resistance." And for correctional facilities the right enforced must be constitutional; a statutory right alone does not support CRIPA relief for people in a jail or prison, though a pretrial detention facility is separately listed in § 1997(1)(B)(iii), and how the two categories interact for a county jail holding both pretrial and sentenced people is a question this page found no opened authority resolving. Settled as to text; Unsettled as to the interaction.

Notice before suit: the source of the "findings letter." Before suing, the Attorney General must certify to the court "that at least 49 calendar days previously the Attorney General has notified in writing the Governor" or other chief executive officer and other officials of "the alleged conditions which deprive rights, privileges, or immunities secured or protected by the Constitution," "the supporting facts giving rise to the alleged conditions and the alleged pattern or practice," and "the minimum measures which the Attorney General believes may remedy the alleged conditions" (42 U.S.C. § 1997b(a)(1)). The certification must also state that notice of the investigation was given in advance, that the Attorney General "has made a reasonable good faith effort to consult with the Governor" "regarding financial, technical, or other assistance which may be available from the United States," and that the Attorney General "has encouraged the appropriate officials to correct the alleged conditions" (§ 1997b(a)(2)), and the Attorney General "shall personally sign any certification" (§ 1997b(b)). Settled (statutory text). The § 1997b(a) notice is a pre-suit communication to specified officials, not a judgment and not a statutory command to publish a particular public findings letter. A published DOJ findings report may overlap factually with that notice, but the two should not be presumed identical without comparing the actual documents and issuance dates. The statutory notice and certification requirements are distinct from any later settlement or adjudication (Roadmap 048.1).

Intervention in private suits. The Attorney General may also move to intervene in an action already "commenced in any court of the United States seeking relief" from such conditions, ordinarily not until ninety days after the action begins, on a certification of notice to officials and that intervention is of general public importance (42 U.S.C. § 1997c(a)–(b); paraphrased from the official text). Settled (statutory text).

Reporters are protected. "No person reporting conditions which may constitute a violation under this subchapter shall be subjected to retaliation in any manner for so reporting" (42 U.S.C. § 1997d). Settled (statutory text). The section states the prohibition; it does not itself state an enforcement mechanism for an individual, and how a retaliated-against reporter enforces it is a counsel question (Analytical inference). A worker who reports may also have state protection under Labor Code § 1102.5 (Roadmaps 021, 023).

Private litigation is neither expanded nor delayed. "The provisions of this subchapter shall in no way expand or restrict the authority of parties other than the United States to enforce the legal rights which they may have pursuant to existing law with regard to institutionalized persons. In this regard, the fact that the Attorney General may be conducting an investigation or contemplating litigation pursuant to this subchapter shall not be grounds for delay of or prejudice to any litigation on behalf of parties other than the United States" (42 U.S.C. § 1997j). Settled (statutory text). Read with § 1997a, the text gives a private person no CRIPA cause of action and takes away none the person already has. It also cuts the other way: a family's lawsuit does not wait for a federal investigation, and a federal investigation does not pause the family's deadlines.

Pattern-or-practice authority under 34 U.S.C. §§ 12601–12602

Section 12601(a) makes it "unlawful for any governmental authority, or any agent thereof," "to engage in a pattern or practice of conduct by law enforcement officers" — or by officials or employees of any governmental agency with responsibility for the administration of juvenile justice or the incarceration of juveniles — "that deprives persons of rights, privileges, or immunities secured or protected by the Constitution or laws of the United States." Section 12601(b) supplies the only enforcement provision in the text: "Whenever the Attorney General has reasonable cause to believe that a violation" has occurred, "the Attorney General, for or in the name of the United States, may in a civil action obtain appropriate equitable and declaratory relief to eliminate the pattern or practice." The section was formerly 42 U.S.C. § 14141 and was editorially reclassified (34 U.S.C. § 12601, uscode.house.gov). Settled (statutory text).

What the text says about who may sue is therefore exact: it authorizes a civil action by the Attorney General, in the name of the United States, for equitable and declaratory relief; it names no other plaintiff and authorizes no damages. Whether courts have read § 12601 to deny any implied private action was not confirmed by an opened decision for this page; the conclusion that a detainee or family cannot sue under it rests on the text (Analytical inference from text). Its reach in adult jails depends on whether the conduct is "conduct by law enforcement officers," a term the section does not define; the juvenile clause expressly reaches officials responsible for "the incarceration of juveniles" (Unsettled as to adult custodial staff). The Civil Rights Division's Special Litigation Section lists § 12601 alongside CRIPA as authority in at least one investigation of a state corrections system shown on its website (Documented report). The companion § 12602 directs the Attorney General to "acquire data about the use of excessive force" "by law enforcement officers," limits that data to "research or statistical purposes," and requires "an annual summary" (34 U.S.C. § 12602). Settled (statutory text). It is a data provision, not a complaint process, and it does not address medical care.

ADA Title II: the administrative complaint route

Roadmap 068 sets out Title II's substance in custody: § 12132, the jail regulation at 28 C.F.R. § 35.152 (AR-055-R01), the contracting rule of § 35.130(b)(1) (AR-061-R01), and the private remedy that § 12133 borrows from § 504 (AR-068-F02). This page addresses the administrative route.

Who may file, when and where. "An individual who believes that he or she or a specific class of individuals has been subjected to discrimination on the basis of disability by a public entity may, by himself or herself or by an authorized representative, file a complaint under this part" (28 C.F.R. § 35.170(a)). "A complaint must be filed not later than 180 days from the date of the alleged discrimination, unless the time for filing is extended by the designated agency for good cause shown," and "[a] complaint is deemed to be filed under this section on the date it is first filed with any Federal agency" (§ 35.170(b)). An individual "may file a complaint with any agency that he or she believes to be the appropriate agency designated under subpart G of this part, or with any agency that provides funding to the public entity that is the subject of the complaint, or with the Department of Justice for referral" (§ 35.170(c)). Settled (regulatory text).

Which agency. The designated agencies are assigned by function. The Department of Health and Human Services has programs "relating to the provision of health care and social services"; the Department of Justice has programs relating to "law enforcement, public safety, and the administration of justice, including courts and correctional institutions" (28 C.F.R. § 35.190(b)(3), (b)(6)). Where "two or more agencies have apparent responsibility over a complaint," the Assistant Attorney General decides which is the designated agency, and the Department of Justice "may exercise its discretion to retain the complaint for investigation" (§ 35.190(d)–(e)). Settled (regulatory text). A jail's health service sits at the junction of those two assignments; the regulation resolves the overlap by assignment, not by the complainant's choice, and filing with either agency fixes the filing date (§ 35.170(b)). Analytical inference.

What the agency does. A receiving agency "shall promptly review the complaint to determine whether it has jurisdiction," refers misdirected complaints, and "shall accept all complete complaints" (28 C.F.R. § 35.171). "The designated agency shall investigate complaints for which it is responsible," "may conduct compliance reviews," and "[w]here appropriate" "shall attempt informal resolution"; "if resolution is not achieved and a violation is found," it issues "to the public entity and the complainant, if any, a Letter of Findings" that includes "[f]indings of fact and conclusions of law" and "[a] description of a remedy for each violation found (including compensatory damages where appropriate)" (§ 35.172(a)–(c)). A voluntary compliance agreement must "[s]pecify the corrective or remedial action to be taken, within a stated period of time" and "[p]rovide for enforcement by the Attorney General" (§ 35.173); if negotiations fail, "the designated agency shall refer the matter to the Attorney General with a recommendation for appropriate action" (§ 35.174). Settled (regulatory text).

The private suit is independent. "At any time, the complainant may file a private suit pursuant to section 203 of the Act, 42 U.S.C. 12133, whether or not the designated agency finds a violation" (28 C.F.R. § 35.172(d)). Settled (regulatory text). The administrative complaint is therefore neither a prerequisite to a Title II suit nor a bar to one; the separate PLRA exhaustion requirement for a person who is a prisoner when suing is discussed below and in Roadmaps 068 and 080.

Retaliation. "No private or public entity shall discriminate against any individual" "because that individual made a charge, testified, assisted, or participated in any manner in an investigation, proceeding, or hearing under the Act or this part," and none "shall coerce, intimidate, threaten, or interfere with any individual" in the exercise of Title II rights (28 C.F.R. § 35.134(a)–(b)). Settled (regulatory text).

The HHS Office for Civil Rights: HIPAA, the correctional provisions, Section 504 and Section 1557

Toolkit 128.1 carries the HIPAA complaint mechanics; this subsection states only what the pathway analysis needs.

HIPAA. "A person who believes a covered entity or business associate is not complying" with the administrative-simplification rules "may file a complaint with the Secretary"; the complaint "must be filed in writing," "must name the person that is the subject of the complaint and describe the acts or omissions believed to be in violation," and "must be filed within 180 days of when the complainant knew or should have known that the act or omission complained of occurred, unless this time limit is waived by the Secretary for good cause shown" (45 C.F.R. § 160.306(a)–(b); AR-096-F05, re-read on ecfr.gov, current through Oct. 6, 2026). The regulation directs an investigation where a preliminary review indicates "a possible violation due to willful neglect" and permits investigation of any other complaint (§ 160.306(c)(1)–(2)). Whether a jail health program or its contractor is a covered entity turns on the definitions in 45 C.F.R. § 160.103 (AR-083-R06) and the entity's electronic transactions — a fact, never an assumption. Settled (text); Fact-dependent (coverage).

The correctional provisions. A covered entity "may disclose to a correctional institution or a law enforcement official having lawful custody of an inmate or other individual protected health information about such inmate or individual, if the correctional institution or such law enforcement official represents that such protected health information is necessary for" listed purposes, including "[t]he provision of health care to such individuals," "[t]he health and safety of such individual or other inmates," "[t]he health and safety of the officers or employees of or others at the correctional institution," and "[t]he administration and maintenance of the safety, security, and good order of the correctional institution" (45 C.F.R. § 164.512(k)(5)(i); AR-053-R01). A covered entity that is itself a correctional institution "may use protected health information of individuals who are inmates for any purpose for which such protected health information may be disclosed," and "an individual is no longer an inmate when released on parole, probation, supervised release, or otherwise is no longer in lawful custody" (§ 164.512(k)(5)(ii)–(iii)). Settled (regulatory text). A complaint about a disclosure in custody is assessed against these permissions; a disclosure to custody staff is not, by that fact alone, outside them (Toolkit 128.1, Part 13).

No private HIPAA action. The Ninth Circuit has stated that "HIPAA itself provides no private right of action" (Webb v. Smart Document Solutions, LLC (9th Cir. Aug. 27, 2007) (No. 05-56282)). Majority/likely (a Ninth Circuit statement in the court's reasoning; reproduction host). State-law claims for misuse of medical information, such as under the Confidentiality of Medical Information Act, are separate and have their own requirements (Roadmap 083).

Retaliation and whistleblower disclosures. A covered entity or business associate "may not threaten, intimidate, coerce, harass, discriminate against, or take any other retaliatory action against any individual or other person for" filing a complaint, participating in an investigation, or opposing an unlawful practice where the person has "a good faith belief that the practice opposed is unlawful, and the manner of opposition is reasonable and does not involve a disclosure of protected health information in violation of" the privacy rule (45 C.F.R. § 160.316). Separately, a workforce member who believes in good faith that the covered entity's conduct is "unlawful" or "violates professional or clinical standards," or that its care "potentially endangers one or more patients, workers, or the public," may disclose to "[a] health oversight agency or public health authority authorized by law to investigate," "an appropriate health care accreditation organization," or "[a]n attorney retained by or on behalf of the workforce member" (45 C.F.R. § 164.502(j)(1)). Settled (regulatory text). That provision is a narrow permission tied to covered-entity status and to the listed recipients; it is not authority to access records outside a person's role, to remove records, or to send records to anyone else, and whether a particular disclosure fits it is a counsel question (Roadmaps 022, 023).

Section 504 and Section 1557. Section 1557 provides that "an individual shall not, on the ground prohibited under title VI of the Civil Rights Act of 1964," and other statutes including "section 794 of title 29, be excluded from participation in" "any health program or activity, any part of which is receiving Federal financial assistance," and that "[t]he enforcement mechanisms provided for and available under such title VI, title IX, section 794," "shall apply for purposes of violations of this subsection" (42 U.S.C. § 18116(a)). HHS's Section 504 regulation provides that "[t]he procedural provisions applicable to title VI of the Civil Rights Act of 1964 apply to this part," identifying 45 C.F.R. §§ 80.6 through 80.10 and part 81 (45 C.F.R. § 84.98, as amended May 9, 2024). Under those procedures, "[a]ny person who believes himself or any specific class of individuals to be subjected to discrimination" may file a written complaint, which "must be filed not later than 180 days from the date of the alleged discrimination, unless the time for filing is extended"; the Department makes "a prompt investigation" where information indicates possible noncompliance; matters are "resolved by informal means whenever possible"; and "[t]he identity of complainants shall be kept confidential except to the extent necessary" to carry out the regulation, including investigations and proceedings (45 C.F.R. § 80.7(b)–(e)). Settled (regulatory text). Whether any part of a jail's health program receives HHS financial assistance is a fact to be established; § 504's "program or activity" definition can make funding to one part of a county department relevant to the whole (29 U.S.C. § 794(b); AR-061-F04; Roadmap 068).

Separate 2026 SUD-records complaint pathway. HHS OCR states that the 2024 revision of 42 C.F.R. part 2 became subject to mandatory compliance on February 16, 2026 and that OCR began accepting Part 2 complaints and breach reports on that date. Part 2 is not merely another name for HIPAA: a federally assisted substance-use-disorder diagnosis, treatment or referral program and certain lawful holders of its records may have obligations independent of whether the program is a HIPAA covered entity. A correctional facility or its contractor is not automatically a Part 2 program; eligibility, applicable records, lawful-holder status and exceptions require documentary verification. OCR identifies 45 C.F.R. part 160, subparts C–E, as the civil-enforcement framework. Especially where an agency receives or seeks substance-use records about detainees, do not infer a general right to distribute those records in a public complaint. Source: HHS OCR, Understanding Confidentiality of Substance Use Disorder Patient Records, content reviewed September 29, 2026 (https://www.hhs.gov/hipaa/part-2/index.html (external site)). Official agency guidance checked October 18, 2026; applicability fact-dependent.

Funding-based civil-rights enforcement by the Department of Justice

The Office for Civil Rights of the Office of Justice Programs "enforces federal civil rights laws and other provisions that prohibit discrimination by recipients of federal financial assistance from OJP, OVW, and the COPS Office," on bases including disability, and it states that it may look at agencies that receive Justice Department funds through state or local governments (OJP Office for Civil Rights pages). Documented report (agency description). The Department's Section 504 regulation for federally assisted programs applies "[t]he procedural provisions applicable to title VI of the Civil Rights Act of 1964" (28 C.F.R. § 42.530(a)), and those procedures permit "[a]ny person who believes himself or any specific class of individuals to be subjected to discrimination" to file a written complaint, which "must be filed not later than 180 days from the date of the alleged discrimination" unless extended; they provide for "a prompt investigation," for informal resolution "whenever possible," for written notice where no action is warranted, and for confidentiality of complainants' identity "except to the extent necessary" (28 C.F.R. § 42.107(b)–(e)). Settled (regulatory text). Whether a particular sheriff's department or county receives Justice Department financial assistance, directly or as a subrecipient, is a fact to be established from grant records, not assumed. Analytical inference.

Medicaid's inmate exclusion and the role of CMS

The definition of "medical assistance" in the Medicaid statute is followed by flush language providing that, "except as otherwise provided in paragraph (16), such term does not include— (A) any such payments with respect to care or services for any individual who is an inmate of a public institution (except as a patient in a medical institution," with further exceptions for certain "eligible juvenile[s]" (42 U.S.C. § 1396d(a), flush language now following paragraph (32); AR-053-F01, re-read on LII for this page). The regulations define the terms and bar federal financial participation for "[i]ndividuals who are inmates of public institutions" (42 C.F.R. §§ 435.1009–435.1010; AR-053-R02). Settled (statutory and regulatory text). In April 2023 CMS issued State Medicaid Director Letter SMD# 23-003, stating that "federal Medicaid funds may not be used to pay for services for such individuals while they are incarcerated" and describing a "Reentry Section 1115 Demonstration Opportunity" under which States may seek authority to cover specified services "for up to 90 days before the incarcerated individual's expected date of release" (CMS, SMD# 23-003 (Apr. 17, 2023)). Documented report (agency guidance). California is not merely considering such a demonstration: CMS approved the state's targeted pre-release services initiative on January 26, 2023, and the California Department of Health Care Services (DHCS) reports that it began implementation in October 2024, with eligible individuals potentially receiving specified Medi-Cal services during up to 90 days before release, subject to facility go-live/readiness and program conditions. This narrow demonstration does not erase the general inmate exclusion or automatically make routine jail sick-call treatment Medicaid reimbursable. A county's actual go-live date, eligible services, billing entity and implementation compliance must be proved from its contemporaneous readiness approval, operational records and claim data; these are not established by the federal approval alone. Sources: CMS approval, January 26, 2023 (https://www.cms.gov/newsroom/press-releases/hhs-approves-californias-medicaid-childrens-health-insurance-plan-chip-demonstration-authority (external site)); DHCS current program (https://www.dhcs.ca.gov/calaim-transforming-medi-cal/justice-involved-reentry-initiative/ (external site)). Official federal/state implementation sources checked October 18, 2026.

CMS's oversight of providers runs through certification. Its State Operations Manual applies its complaint procedures to "Medicare-certified providers/suppliers, Medicaid-certified providers/suppliers, or CLIA-certified laboratories," accepts information from "beneficiaries themselves, beneficiaries' family members, health care providers, concerned citizens," states that the survey agency and regional office "ensure the privacy and anonymity of every complainant," and describes outcomes including deficiencies documented "on Form CMS 2567," a required "plan of correction," and termination tracks (CMS, State Operations Manual, ch. 5, §§ 5000.2, 5010, 5080.2, 5110.2–5110.3). Documented report (agency manual). Neither Medicaid approval nor a state readiness table makes a county jail's ordinary medical unit a Medicare- or Medicaid-certified hospital/supplier subject to CMS provider surveys. CMS nonetheless oversees the state Medicaid demonstration and federal matching-fund rules governing approved pre-release services. These are two distinct oversight functions: a complaint about an external certified hospital may invoke provider-survey rules; a question about a jail's CalAIM pre-release service implementation should first be routed to DHCS and the responsible implementing partners. Neither pathway by itself proves CMS authority to investigate jail-wide clinical negligence as such. Official agency guidance; legal inference limited to scope. CMS matters in custody chiefly in four ways: the payment rule shapes where and how care is delivered (Roadmap 053); a certified hospital that receives a detainee is within CMS's survey system through the State Survey Agency (in California, the Department of Public Health's licensing and certification program; Roadmap 097); Medicaid eligibility and reentry coverage bear on continuity of care at release; and, in California, approved section 1115 pre-release services create a specific DHCS/CMS demonstration-implementation and claims-compliance channel distinct from oversight of ordinary jail health services.

The Death in Custody Reporting Act

The Act requires each State receiving the covered federal funds to "report to the Attorney General, on a quarterly basis," specified information about the death of any person who is detained, under arrest, in the process of arrest, en route to incarceration, or incarcerated at a municipal or county jail, state prison or other listed facility (34 U.S.C. § 60105(a)–(b); AR-064-F01; Roadmap 064). A noncomplying State "shall, at the discretion of the Attorney General, be subject to not more than a 10-percent reduction of the funds" under the covered programs, which "shall be reallocated" to complying States (§ 60105(c)(2), (d)). The Attorney General must "carry out a study of the information reported" to "determine means by which such information can be used to reduce the number of such deaths," with a report to Congress due "[n]ot later than 2 years after December 18, 2014" (§ 60105(f)). Settled (statutory text; re-read on govinfo.gov). The Bureau of Justice Assistance describes the reporting chain: States receiving Edward Byrne Memorial Justice Assistance Grant funds report through State Administering Agencies, which compile data "on a quarterly basis," including "[t]he decedent's name, date of birth, gender, race, and ethnicity," "[t]he date, time, and location of the death," and "[a] brief description of the circumstances surrounding the death," and BJA "has released aggregate national-level data reported by states" (BJA, DCRA Overview; AR-064-G02, re-read). Documented report.

A September 20, 2022 staff report of the U.S. Senate Permanent Subcommittee on Investigations, Uncounted Deaths in America's Prisons & Jails: How the Department of Justice Failed to Implement the Death in Custody Reporting Act, stated the Subcommittee's conclusion that the Department of Justice "is failing to effectively implement DCRA 2013," that it "failed to identify at least 990 prison and arrest related deaths" in fiscal year 2021, and that "70% of the data DOJ collected was incomplete." Documented report (congressional staff report; not an adjudication; later developments not reviewed for this page). The relevance here is limited: federal DCRA data are aggregate and their completeness has been publicly questioned, so a family or researcher should not treat a federal count as the authoritative record of any single death. California's own reports — the Gov. Code § 12525 report to the Attorney General, the Penal Code § 10008 posting, and the Board of State and Community Corrections' review — are the primary sources (Roadmaps 064, 093, 097).

Federal criminal civil-rights law

"Whoever, under color of any law, statute, ordinance, regulation, or custom, willfully subjects any person" "to the deprivation of any rights, privileges, or immunities secured or protected by the Constitution" commits a federal crime, with enhanced penalties, including death, "if death results from the acts committed in violation of this section" (18 U.S.C. § 242). Settled (statutory text). Prosecution is entirely within federal prosecutors' discretion; the statute creates no civil remedy and no role for a complainant beyond providing information. The Civil Rights Division's intake page directs reports of law-enforcement misconduct to the FBI (civilrights.justice.gov). This page addresses the statute only to route information correctly; the willfulness element and criminal procedure are outside its scope.

Federal complaints and PLRA exhaustion

"No action shall be brought with respect to prison conditions under section 1983 of this title, or any other Federal law, by a prisoner confined in any jail, prison, or other correctional facility until such administrative remedies as are available are exhausted" (42 U.S.C. § 1997e(a); AR-096-F04; AR-S608). Exhaustion must be "proper" — compliance with the grievance system's own deadlines and procedural rules (Woodford v. Ngo, AR-080-C03). The Supreme Court has held that the statute's "mandatory language means a court may not excuse a failure to exhaust, even to take such circumstances into account," while recognizing that "[a]n inmate, that is, must exhaust available remedies, but need not exhaust unavailable ones" (Ross v. Blake, 578 U.S. 632 (2016); AR-0961-C09). In Ross the prisoner had not filed a grievance because he believed that a separate internal investigation "served as a substitute for that otherwise standard process"; the Court rejected the lower court's "special circumstances" exception and remanded for a determination of whether the grievance process was in fact available. Settled.

The point for federal oversight follows from that holding. The administrative remedies that § 1997e(a) requires are those of the facility's grievance system. A report to the Civil Rights Division, a Title II complaint to a designated agency, a HIPAA complaint to HHS, or a report to the FBI is not a step in that system, and under Ross a prisoner's reasonable belief that another investigation substitutes for the grievance does not excuse the failure to file one; only actual unavailability does — a procedure that "operates as a simple dead end," one "so opaque that it becomes, practically speaking, incapable of use," or officials who "thwart inmates from taking advantage of a grievance process through machination, misrepresentation, or intimidation." Analytical inference as applied to federal agency complaints (from the holdings of Ross and Woodford; no opened decision addresses each federal pathway by name). Exhaustion applies to a person who is a prisoner when suit is filed; its application after release or after death is addressed in Roadmaps 068 and 080.

Federal records: the Freedom of Information Act

A federal agency, "upon any request for records which (i) reasonably describes such records," "shall make the records promptly available to any person," subject to exemptions, including for "inter-agency or intra-agency memorandums or letters that would not be available by law to a party," for "personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy," and for "records or information compiled for law enforcement purposes" to the extent production "could reasonably be expected to interfere with enforcement proceedings" or "could reasonably be expected to constitute an unwarranted invasion of personal privacy" (5 U.S.C. § 552(a)(3)(A), (b)(5), (b)(6), (b)(7)(A), (b)(7)(C)). Settled (statutory text). Open investigative files of the Civil Rights Division and complaint files of the Offices for Civil Rights are the kind of records these exemptions address; published findings, agreements and court filings are not. Application to any request is fact-specific. Analytical inference.

The federal pathways body by body#

Each block states the ten elements. Where a body is not a proper destination for a complaint about jail health care, the block says so and routes to the body that is.

1. Department of Justice, Civil Rights Division — Special Litigation Section (CRIPA and 34 U.S.C. § 12601)

(1) Jurisdiction. Institutions as defined in 42 U.S.C. § 1997(1), including jails, prisons and pretrial detention facilities operated by or on behalf of a State or political subdivision; the respondents named in § 1997a(a) include the State or political subdivision, its officials, employees and agents, and any "other person acting on behalf of" it. Section 12601 reaches patterns of conduct by law enforcement officers and juvenile-justice officials. The Section describes its jail and prison work as covering people in "state or local institutions, including: jails, prisons, juvenile detention facilities" (Special Litigation Section page). Settled (text); Documented report (agency description).

(2) Who may complain. The statutes create no complainant role; the Attorney General acts on "reasonable cause to believe." In practice, information may come from anyone: the Division's intake page invites a report if "you or someone else experienced unlawful discrimination" (civilrights.justice.gov). A detainee, prisoner, family member, advocate, clinician or other person with information may report. Documented report.

(3) Scope. Systemic conditions only. The Section states that "[e]vidence of harm to one individual only - even if that harm is serious - is not enough" and that it "cannot bring a case based on every report" it receives (Rights of Persons Confined to Jails and Prisons page). For jails and prisons, CRIPA relief is limited to constitutional deprivations (§ 1997a(a)). Health care is within scope where inadequate care rises to a constitutional deprivation that is "egregious or flagrant," causes "grievous harm" and reflects a "pattern or practice of resistance." Settled (text); Documented report (agency statement).

(4) Evidence that matters. Evidence of a pattern, not an anecdote: multiple dated incidents of the same kind; the facility's written policies and how they are applied; staffing, response-time and backlog information from public sources; public death and review records (Roadmaps 064, 097); grievance responses showing repeated refusals; and reports by oversight bodies (Roadmap 098). The reporter should send only what the reporter lawfully holds and is entitled to share (records key below).

(5) What the Attorney General is authorized to do. Investigate after notice (§ 1997b(a)(2)); issue the written notice of alleged conditions, supporting facts and minimum remedial measures (§ 1997b(a)(1)); consult and encourage correction; sue "for such equitable relief as may be appropriate to insure the minimum corrective measures necessary" (§ 1997a(a)), or, under § 12601(b), "obtain appropriate equitable and declaratory relief to eliminate the pattern or practice"; and intervene in a pending private action on the required certification (§ 1997c). Resolution by agreement or court-entered decree is a common form of equitable relief; its terms and evidentiary character are addressed in Roadmap 048.1. Settled (text).

(6) What it cannot award. Money to any detainee or family. The statutes authorize equitable and declaratory relief to the United States; the Section states that it "cannot help you recover money damages or any other personal relief" and does "not assist with individual problems." It does not represent individuals. Settled (text); Documented report.

(7) Confidentiality and public records. Investigative files are federal agency records subject to FOIA's law-enforcement and privacy exemptions (5 U.S.C. § 552(b)(6), (b)(7)(A), (b)(7)(C)). Complaints filed in court and entered agreements are court records; the Section posts cases, findings and agreements on its "Cases and Matters" pages. Retaliation against a person "reporting conditions which may constitute a violation" is prohibited (§ 1997d). A reporter who is concerned about identification should say so in the report; this page found no opened provision guaranteeing anonymity for CRIPA reports. Settled (text); Analytical inference (confidentiality in practice).

(8) Exhaustion consequences. None for the reporter, and none for anyone's private claim: CRIPA does not "expand or restrict the authority of parties other than the United States," and an investigation "shall not be grounds for delay of or prejudice to any litigation" by others (§ 1997j). A report to the Section does not exhaust a jail grievance (Ross; Woodford). Settled (text); Analytical inference from Ross and Woodford (PLRA application).

(9) Deadlines.

(10) Official filing source. Civil Rights Division reporting portal, https://civilrights.justice.gov/report/ (external site) (opened 2026-10-09; reached from https://civilrights.justice.gov/ (external site)); Special Litigation Section, https://www.justice.gov/crt/special-litigation-section (external site) (opened 2026-10-09).

2. Department of Justice, Civil Rights Division — ADA Title II complaints about correctional programs

(1) Jurisdiction. Disability discrimination by a "public entity" (Roadmap 068). The Department of Justice is the designated agency for programs relating to "law enforcement, public safety, and the administration of justice, including courts and correctional institutions" (28 C.F.R. § 35.190(b)(6)), and it may retain complaints that fall within other agencies' areas (§ 35.190(e)). Whether a private contractor is itself a Title II public entity is unsettled; the county remains responsible for services delivered through contract (§ 35.130(b)(1); Roadmap 068). Settled (text); Unsettled (contractor status).

(2) Who may complain. "An individual who believes that he or she or a specific class of individuals has been subjected to discrimination on the basis of disability by a public entity," "by himself or herself or by an authorized representative" (§ 35.170(a)). A family member files as an authorized representative or as a person describing a class; the regulation does not require that the complainant be a lawyer. Settled.

(3) Scope. Exclusion from or denial of jail services, programs or activities by reason of disability; refused reasonable modifications; ineffective communication; housing in medical areas or more restrictive settings for want of accessible cells (28 C.F.R. §§ 35.130, 35.152, 35.160; Roadmap 068). Not within scope: the quality of clinical judgment as such ("The ADA prohibits discrimination because of disability, not inadequate treatment for disability," Simmons, AR-063-C05). Settled.

(4) Evidence that matters. The dated written request for an accommodation and the response; the disability and the functional limitation; what was provided instead; the service affected (sick call, intake, medication counselling); any grievance under the entity's § 35.107 procedure (AR-068-R05); and witnesses. For effective-communication complaints, the medical encounter record showing how communication occurred.

(5) What the agency is authorized to do. Review and accept or refer the complaint (§ 35.171); investigate and conduct compliance reviews; attempt informal resolution; issue a Letter of Findings with findings of fact, conclusions of law and "[a] description of a remedy for each violation found (including compensatory damages where appropriate)" (§ 35.172(c)); negotiate a voluntary compliance agreement enforceable by the Attorney General (§ 35.173); or refer the matter to the Attorney General with a recommendation (§ 35.174). The ADA.gov complaint page adds that the Department "might refer your complaint" to its ADA Mediation Program or another federal agency, and that an investigation "could lead to a settlement or a lawsuit." Settled (regulatory text); Documented report (agency description).

(6) What it cannot award. The agency does not enter a judgment for the complainant. The regulation authorizes a Letter of Findings to describe a remedy that may include compensatory damages "where appropriate," but payment depends on the public entity's agreement or on enforcement by the Attorney General; the regulation gives the complainant no power to compel payment through the administrative process. The private suit remains available "[a]t any time" (§ 35.172(d)). Settled (text); Analytical inference (practical effect).

(7) Confidentiality and public records. The Department's mediation is described as "confidential and voluntary" (ADA.gov). Complaint and investigative files are subject to FOIA and its exemptions; agreements the Department enters are commonly published (description level). Retaliation and interference are prohibited (§ 35.134). Settled (text); Documented report.

(8) Exhaustion consequences. The administrative complaint is not a prerequisite to a private Title II suit (§ 35.172(d)). It is not the jail grievance that a prisoner must exhaust under 42 U.S.C. § 1997e(a) (O'Guinn, AR-068-C07; Ross; Roadmap 080). It does not stop the limitation period for a private Title II action, which the Ninth Circuit borrows from Code Civ. Proc. § 338(a) (Sharkey, AR-068-C10). Settled (text); Analytical inference (no tolling effect; no opened authority on tolling).

(9) Deadlines.

(10) Official filing source. ADA.gov, "File a Complaint," https://www.ada.gov/file-a-complaint/ (external site) (opened 2026-10-09), which routes online filing to civilrights.justice.gov and lists a mailing address for the paper form.

3. Department of Health and Human Services, Office for Civil Rights

This block summarizes; Toolkit 128.1 contains the complaint mechanics and must be used for any HIPAA complaint.

(1) Jurisdiction. HIPAA privacy, security and breach-notification rules as to covered entities and business associates (45 C.F.R. §§ 160.103, 160.306); a separate Part 2 civil-enforcement and complaint route for covered SUD-record programs and other regulated holders, accepting reports since February 16, 2026, under 42 C.F.R. part 2 and 45 C.F.R. part 160, subparts C–E; Section 504 as to HHS-funded programs (45 C.F.R. § 84.98); Section 1557 as to health programs receiving federal financial assistance (42 U.S.C. § 18116); and Title II complaints about public-entity programs "relating to the provision of health care" (28 C.F.R. § 35.190(b)(3)). HHS's civil-rights complaint page states that OCR generally does not investigate law-enforcement complaints and directs those to other federal agencies. Settled (text); Documented report (agency statements).

(2) Who may complain. For HIPAA, "[a] person who believes a covered entity or business associate is not complying" (§ 160.306(a)); HHS's page states that "[a]nyone can file a complaint." For Part 2, HHS states that anyone may submit a Part 2 complaint to OCR beginning February 16, 2026, if they believe SUD records were shared contrary to that rule; whether any particular record or recipient is subject to Part 2 is separate from the right to report. For § 504 and § 1557, "[a]ny person who believes himself or any specific class of individuals to be subjected to discrimination" (45 C.F.R. § 80.7(b)). Regulatory text for HIPAA/§ 504; current HHS guidance for Part 2.

(3) Scope. Uses and disclosures of protected health information outside the rules' permissions, including the correctional permissions of § 164.512(k)(5); denial of a patient's access to the patient's own records (45 C.F.R. § 164.524; AR-058-R01); disability discrimination in HHS-funded health programs. A qualifying Part 2 disclosure may require a separate analysis of patient consent, lawful holders, SUD-program identification and limits on use in proceedings against the patient. Do not treat a general correctional HIPAA disclosure permission as independently satisfying Part 2. Not within OCR's general administrative scope: malpractice determinations, adjudicating constitutional adequacy of individual custody care, or running a jail. Agency guidance and regulations; applicability fact-dependent.

(4) Evidence that matters. For privacy: what information was disclosed, by whom, to whom, when, how the complainant learned of it, and why the disclosure falls outside a permitted purpose if known; for access: the written request and the response. For discrimination: as in block 2. Covered-entity status: what the complainant knows about the entity's billing or its notice of privacy practices (Toolkit 128.1, Parts 1, 7).

(5) What OCR is authorized to do. Investigate (mandatorily where a preliminary review indicates possible willful neglect; otherwise in its discretion) and review "the pertinent policies, procedures, or practices" of the entity (§ 160.306(c)); resolve by informal means, corrective action and resolution agreements, or civil money penalties under the HIPAA enforcement rule (Toolkit 128.1, Parts 8 and 12); for qualifying Part 2 noncompliance, conduct complaint investigations and compliance reviews and use civil enforcement mechanisms, including corrective action and possible monetary penalties; for § 504 and § 1557, investigate, seek voluntary compliance, and proceed under the Title VI procedures that can affect federal financial assistance (45 C.F.R. §§ 80.7–80.8, part 81, by reference in § 84.98). Settled (text).

(6) What it cannot award. Damages to the complainant. HIPAA has no private right of action (Webb). OCR's outcomes run against the entity. A patient's state-law remedies for misuse of medical information are pursued in court, not through OCR (Roadmap 083). Settled (text) as to OCR outcomes; Majority/likely as to the absence of a private HIPAA action (Webb).

(7) Confidentiality and public records. Under the § 504 and § 1557 procedures, "[t]he identity of complainants shall be kept confidential except to the extent necessary" (45 C.F.R. § 80.7(e)). Retaliation against HIPAA complainants and participants is prohibited (§ 160.316). OCR's investigative files are not public; resolution agreements and penalty notices are (Toolkit 128.1, Part 12). A complaint must not attach other patients' information. Settled (text); Documented report.

(8) Exhaustion consequences. None for any private claim; an OCR complaint is not a jail grievance and does not present a government claim or toll any period. Analytical inference (from Ross and Woodford and the texts read).

(9) Deadlines.

Part 2 timing hold: Part 2 is a separate regulatory regime. HHS OCR's September 29, 2026 guidance confirms that complaints may be filed, but the controlling filing period and any extension rule for a Part 2-specific allegation were not independently authenticated for this manuscript. The two 180-day entries above therefore must not be imported to a Part 2 matter without checking its governing complaint regulation and effective dates. For a live case, preserve the earliest plausible deadline and obtain counsel review.

(10) Official filing source. HHS OCR Complaint Portal, https://ocrportal.hhs.gov/ (external site) (linked from https://www.hhs.gov/hipaa/filing-a-complaint/index.html (external site) and https://www.hhs.gov/civil-rights/filing-a-complaint/index.html (external site), both opened 2026-10-09).

4. Department of Justice, Office of Justice Programs — Office for Civil Rights

(1) Jurisdiction. Recipients and subrecipients of financial assistance from the Office of Justice Programs, the Office on Violence Against Women and the COPS Office, as to discrimination on the bases the office lists, including disability (OJP Office for Civil Rights page; 28 C.F.R. § 42.530). Jurisdiction over any particular sheriff's department or county depends on whether it holds such an award, directly or through a state agency — a fact to establish from grant records. Documented report; Fact-dependent.

(2) Who may complain. "[A]ny person who believes himself or any specific class of individuals to be subjected to discrimination," personally or through a representative (28 C.F.R. § 42.107(b)); the office's page invites complaints from "individuals or groups who believe that they have experienced discrimination." Settled.

(3) Scope. Discrimination in the delivery of services or in employment by a DOJ-funded recipient on a protected basis. Not within scope: the clinical quality of care; matters with no funding nexus. Settled (text); Analytical inference.

(4) Evidence that matters. The funding relationship (grant name and recipient, if known from public records; Roadmap 087); the discriminatory act; dates; the requests and responses; witnesses.

(5) What the office is authorized to do. Make "a prompt investigation" (28 C.F.R. § 42.107(c)); resolve the matter by informal means "whenever possible" (§ 42.107(d)(1)); proceed under § 42.108 where informal means fail (not opened; description level); and, where no action is warranted, so inform the recipient and the complainant in writing (§ 42.107(d)(2)). Settled (text).

(6) What it cannot award. Damages to the complainant; the opened procedures address compliance by the recipient, not compensation. Settled (text).

(7) Confidentiality and public records. Complainants' identity is kept confidential "except to the extent necessary" (§ 42.107(e)); the office's mail and email route uses an Identity Release Statement. Retaliation is prohibited (§ 42.107(e)). Settled (text).

(8) Exhaustion consequences. None for private claims; not a jail grievance. Analytical inference (from Ross and Woodford).

(9) Deadlines.

(10) Official filing source. OJP, "Filing a Civil Rights Complaint," https://www.ojp.gov/program/civil-rights-office/filing-civil-rights-complaint (external site) (opened 2026-10-09), which links online filing to civilrights.justice.gov and gives a mailing address.

5. Centers for Medicare & Medicaid Services

(1) Jurisdiction. The Medicare and Medicaid programs: payment rules, including the inmate exclusion of 42 U.S.C. § 1396d(a); state Medicaid plans and approved demonstrations, including California's January 26, 2023 section 1115 justice-involved pre-release initiative, implemented by DHCS; and certification of providers and suppliers, enforced through State Survey Agencies (State Operations Manual, ch. 5). Neither the approval nor the program creates blanket CMS survey jurisdiction over a county jail's internal medical unit as such. Because an agency's existence does not make it a complaint destination, CMS is not described here as a destination for complaints about care delivered inside a jail. Settled (text); Analytical inference (no jail jurisdiction).

(2) Who may complain. About a certified provider — for example, a hospital to which a detainee was taken — anyone: "beneficiaries themselves, beneficiaries' family members, health care providers, concerned citizens" (SOM ch. 5, § 5010). Documented report.

(3) Scope. For certified providers, compliance with federal conditions of participation. For the approved California Medicaid reentry demonstration, DHCS implementation of its authorized covered services, readiness, eligibility and federal claiming may be relevant to CMS program oversight. This distinction does not confer ordinary CMS facility-certification jurisdiction over an unlicensed jail medical unit or award individual compensation.

(4) Evidence that matters. In a certified-provider matter: provider identification, encounter dates and lawfully obtained patient records (Roadmap 083). In a CalAIM demonstration matter: DHCS-approved facility go-live/readiness documentation, eligibility and service records, actual claims and the approved waiver terms. No county-wide compliance conclusion follows solely from a requested go-live date.

(5) What it is authorized to do. Through the State Survey Agency, investigate, document deficiencies "on Form CMS 2567," require "an acceptable plan of correction," and in serious cases place a provider on a termination track (SOM ch. 5, §§ 5080.2, 5110.2–5110.3). Documented report.

(6) What it cannot award. Damages; any remedy against a jail or a county. Analytical inference.

(7) Confidentiality and public records. The survey agency and regional office "ensure the privacy and anonymity of every complainant" and disclose identity "only to those individuals with a need to know" (SOM ch. 5, § 5010). Public availability of survey findings is governed by CMS rules not opened for this page (description level).

(8) Exhaustion consequences. None. Analytical inference.

(9) Deadlines.

(10) Official filing source. CMS, State Operations Manual, Chapter 5, "Complaint Procedures," https://www.cms.gov/Regulations-and-Guidance/Guidance/Manuals/Downloads/som107c05.pdf (external site) (opened 2026-10-09). The filing destination for a California hospital is the State Survey Agency (Roadmap 097). For California pre-release services, DHCS and county implementing partners are the operational source for program readiness, coverage and eligibility (Roadmap 096.1, Family K10); the DHCS justice-involved implementation page is https://www.dhcs.ca.gov/calaim-transforming-medi-cal/justice-involved-reentry-initiative/ (external site). A CMS-certified hospital complaint remains a separate survey pathway. Neither is a substitute for emergency care, jail grievances or an individually enforceable claim.

6. Department of Justice and Bureau of Justice Assistance — the Death in Custody Reporting Act

(1) Jurisdiction. The Attorney General receives quarterly death-in-custody reports from States receiving the covered funds and may reduce those funds by up to ten percent for noncompliance (34 U.S.C. § 60105(a)–(d)); BJA administers the program (AR-064-G02). The cited § 60105 state-reporting mechanism operates through State Administering Agencies; BJA separately explains that federal law-enforcement and correctional agencies report deaths in their custody annually to BJS. Those are different collections, and a county-jail death should not be equated with a federal-agency annual report. The DCRA is a reporting and grant-accountability mechanism, not an administrative determination of an individual death's cause. Statutory text and BJA program guidance.

(2) Who may complain. The Act creates no complaint process. Families and the public are not participants in the reporting chain, which runs from local agencies to the State Administering Agency to BJA. A concern that a State is not reporting is a matter for the Department as grantor and for Congress; this page found no opened provision for a public complaint. Information about a particular death belongs with the bodies that investigate it (Roadmaps 064, 093, 097). Analytical inference.

(3) Scope. Deaths of persons detained, under arrest, in the process of arrest, en route to incarceration, or incarcerated in listed facilities, including municipal and county jails (§ 60105(a)); the minimum report contents are in § 60105(b).

(4) Evidence that matters. The statutory data elements; for a researcher comparing counts, the State's own reports and California's § 12525 and § 10008 records.

(5) What the Attorney General is authorized to do. Collect and compile; in the Attorney General's discretion, reduce covered funds of a noncomplying State and reallocate them (§ 60105(c)(2), (d)); study the data and report to Congress (§ 60105(f)). Settled (text).

(6) What it cannot award. Anything to a family; the Act investigates no individual death and creates no claim. Analytical inference (Roadmap 064).

(7) Confidentiality and public records. BJA publishes aggregate national-level data (BJA Overview). Individual-level records held federally are subject to FOIA and its privacy exemptions (5 U.S.C. § 552(b)(6), (b)(7)(C)). The completeness of federal DCRA data has been publicly questioned in a congressional staff report (Senate PSI, 2022). Documented report.

(8) Exhaustion consequences. None.

(9) Deadlines.

(10) Official source. BJA, Death in Custody Reporting Act Overview, https://bja.ojp.gov/program/dcra/overview (external site) (opened 2026-10-09). There is no filing source because there is no complaint process.

7. Federal criminal civil-rights enforcement (routing only)

(1) Jurisdiction. Willful deprivations of federal rights under color of law (18 U.S.C. § 242), prosecuted by the Department of Justice. (2) Who may complain. Anyone may provide information; the Civil Rights Division's intake page directs reports of law-enforcement misconduct to the FBI. (3) Scope. Willful conduct; negligence, malpractice and disagreements about care are outside it. (4) Evidence that matters. Firsthand accounts, dates, identities and lawfully held documents. (5) What is authorized. Investigation and prosecution at prosecutors' discretion. (6) What it cannot award. Any civil remedy; the statute is criminal. (7) Confidentiality. Criminal investigative files are withheld under FOIA's law-enforcement exemptions (§ 552(b)(7)); grand-jury rules are not addressed here. (8) Exhaustion consequences. None; a criminal referral is not a grievance and tolls nothing. (9) Deadlines. None for a reporter (criminal limitation periods bind prosecutors and are not stated here). (10) Official source. civilrights.justice.gov (opened 2026-10-09), which directs law-enforcement misconduct reports to the FBI. Settled (text); Documented report (intake routing).

Federal oversight records: what they are and how they are read#

Federal oversight produces a recognizable set of documents, each with a defined legal character. The written notice required by 42 U.S.C. § 1997b — published as a findings letter or findings report — states the Attorney General's view of the conditions, the supporting facts and the minimum remedial measures; it is an agency position issued as a precondition to suit. A complaint filed by the United States states allegations. An agreement or consent decree records what the parties agreed and, if entered by a court, what the court ordered; it ordinarily recites no admission. Monitor reports under such an agreement describe compliance with its terms. A Letter of Findings under 28 C.F.R. § 35.172 states a designated agency's findings of fact and conclusions of law in a disability matter. An OCR resolution agreement or penalty notice states the outcome of a HIPAA or civil-rights matter against an entity. DCRA data are aggregate counts reported by States. None of these is a judgment that any defendant in a private action is liable, and none should be described as one. Whether and for what purpose any of them is admissible — notice to a policymaker, the existence of a condition, the content of an agreement — depends on the rule invoked and the use proposed, which Roadmap 048.1 sets out document by document, with the docket-reading method (PACER, RECAP, CourtListener) for locating them. Roadmap 049 addresses their use in proving policy or custom.

Two reading rules follow from the statutes. First, a CRIPA document about one facility describes that facility over a period; it is not evidence about a different facility or a different period without a separate foundation. Second, a findings letter states conditions the Attorney General had "reasonable cause to believe" existed; the standard is the Attorney General's, not a court's. Settled (text); Analytical framework.

What federal reporting does not preserve, and how pathways are chosen#

Every federal pathway on this page runs on its own clock and for its own purpose. None of them stops, starts or satisfies any step in a private claim. A prisoner who must exhaust the jail grievance procedure must do so within that procedure's own periods, whatever else the prisoner reports (Ross; Woodford; Roadmaps 080, 121). A government claim to the county under Gov. Code §§ 910–911.2 must be presented within its period, and a federal complaint is not a claim (Roadmaps 078, 131). The limitation periods for § 1983, Title II, § 504 and state-law claims are unaffected (Roadmap 082). Preservation demands to the county and every health-care entity are still needed, because no federal agency preserves evidence for a private litigant (Roadmap 007; Model 132).

Choosing among pathways is a matter of matching the concern to the body with jurisdiction. A single person's denied interpreter is a Title II matter (block 2, or block 3 if routed to HHS as a health-care program), plus a grievance and possibly a private claim. A disclosure of a diagnosis is a HIPAA matter if the discloser is a covered entity or business associate (block 3; Toolkit 128.1), plus possible state-law claims. A documented pattern of delayed emergency response or medication interruptions across many people is CRIPA material (block 1), and also material for state and local oversight (Roadmaps 097, 098). A hospital's handling of a detainee is a matter for the State Survey Agency (block 5; Roadmap 097). Concerns about grant-funded agencies' discrimination go to OJP (block 4). The Death in Custody Reporting Act is not a destination at all (block 6). Writing to several bodies about the same facts is lawful, but each report should be accurate, consistent with the others, limited to what the writer knows, and accompanied only by records the writer is entitled to share. A report is not a pleading, but the same discipline applies to any later court filing: Do not allege a fact unless you have a good-faith factual basis for it.

Applying the law to the hypothetical#

The interpreter refusals are disability matters. The man, or his sister as an authorized representative, may file a Title II complaint within 180 days of the discrimination (28 C.F.R. § 35.170(b)) with the Department of Justice as the designated agency for correctional institutions or with HHS as the agency for health-care programs; whichever receives it first fixes the filing date, and the agencies decide which investigates (§§ 35.170(c), 35.190). A Letter of Findings, if one issues, could describe a remedy, but the agency enters no judgment for him, and his private Title II suit remains available "[a]t any time" (§ 35.172(d)), subject to its own limitation period (Sharkey) and to the PLRA if he is a prisoner when he sues. His grievance about the interpreter was filed; whether it was exhausted, or whether the process became unavailable when he was released before it was answered, is a Roadmap 080 question.

The disclosure of his HIV status is a HIPAA question only if the clinician's employer is a covered entity or business associate; that depends on the contractor's electronic transactions, which the family does not know and should not assume (45 C.F.R. § 160.103). If HIPAA applies, a disclosure to custody staff may be permitted under § 164.512(k)(5)(i) if the institution represented that the information was necessary for a listed purpose, and the complaint would need to address why it was not. The HIPAA complaint period runs 180 days from when he knew or should have known (§ 160.306(b)(3)). OCR cannot award him damages (Webb); any state-law claim is separate and has its own requirements (Roadmap 083). Because he did not grieve the disclosure, a federal claim about it may face an exhaustion defense if he sues while a prisoner; an OCR complaint would not cure that (Ross).

The deaths his sister read about are not, on these facts, connected to his care, and the page draws no connection. If the family or others hold information suggesting a pattern of serious harm across many people, they may report it to the Special Litigation Section, which is authorized to investigate and sue for equitable relief but not to compensate anyone (§ 1997a; Section statement). The deaths are subject to California reporting duties — the § 12525 report, the § 10008 posting, the BSCC review — whose records are the primary public sources (Roadmaps 064, 093, 097); federal DCRA data are aggregate and are not a substitute. His emergency-department visit is within CMS's system only as to the hospital's own conduct, through the State Survey Agency. None of these steps presents a government claim to the county, exhausts a grievance, or tolls any period. Nothing in this paragraph states what any record would show or that any entity acted unlawfully.

A step-by-step approach#

1. Identify each concern separately: disability access or communication; misuse of health information; a systemic pattern across many people; a hospital's conduct; discrimination by a grant-funded agency; a death. Record each in Worksheet 107 or 113.
2. For a person still in custody, file and pursue the facility's grievance procedure within its periods, whatever else is done (Roadmap 080; Worksheet 121).
3. With counsel, identify private-claim prerequisites and limitation sources — government claims, § 364 notices, borrowed periods — and calendar them without assuming that any federal report affects them (Roadmaps 078, 082; Worksheet 120).
4. Send preservation demands to the county, the sheriff and each health-care entity (Roadmap 007; Model 132).
5. Match each concern to the body with jurisdiction using the blocks above; do not send a matter to a body that lacks jurisdiction over it.
6. For a disability complaint or a HIPAA, § 504 or § 1557 complaint, note the 180-day source and file within it; keep the confirmation or transaction number (Toolkit 128.1).
7. For a systemic report, assemble a dated, sourced summary of the pattern from records lawfully held or publicly available (Roadmaps 087, 097, 098), and state plainly what is firsthand and what is reported.
8. Attach only records you are entitled to share; never include other patients' information, and never take records from jail or health systems (records key below).
9. Request public federal materials — findings letters, agreements, court filings, DCRA aggregate data — from the agency websites and dockets, and use FOIA for others, expecting exemptions (5 U.S.C. § 552(b)).
10. Before any pleading uses a federal document: Do not allege a fact unless you have a good-faith factual basis for it. Read the document for what it is (Roadmap 048.1), and check Roadmaps 090/091 before suing any Wellpath debtor entity.

Elements of the claim#

This page describes regulatory pathways, not causes of action. On the opened text, CRIPA and 34 U.S.C. § 12601 authorize civil actions only by the Attorney General, and § 1997j confirms that CRIPA neither creates nor removes private rights; HIPAA creates no private right of action (Webb); the Death in Custody Reporting Act creates none (Analytical inference); and 18 U.S.C. § 242 is a criminal statute. Private claims that may arise from the same facts have elements stated elsewhere: Title II and § 504 (Roadmap 068; private suit preserved by 28 C.F.R. § 35.172(d) and 42 U.S.C. § 12133); constitutional medical-care claims (Roadmaps 042–044); entity liability (Roadmaps 046–050); professional negligence (Roadmap 066); wrongful death and survival (Roadmap 065); and the element tables (Roadmap 096.3). Where federal findings or agreements are used in a pleading: Do not allege a fact unless you have a good-faith factual basis for it, and do not describe an agreement or findings letter as an adjudication.

Potentially relevant defendants#

Federal agencies are not defendants by reason of their oversight roles; they are recipients of information and, for records, custodians. For the federal processes, the respondents are defined by each statute: under CRIPA, the State or political subdivision and its officials, employees, agents and persons "acting on behalf of" it; under § 12601, the governmental authority and its agents; under Title II, the public entity; under HIPAA, the covered entity or business associate; under § 504 and § 1557, the recipient of federal financial assistance; under DCRA, the State. For any private claim, defendants are identified by role and function — the county, the sheriff in an official capacity, any health-care contractor identified by exact legal name from the contract, and individuals — as Roadmaps 045, 046, 068 and 101 explain. Liability is never inferred from branding, from a contract, or from a federal investigation.

Administrative prerequisites#

No federal complaint on this page is a prerequisite to any private claim, and none satisfies one. For a person who is a prisoner when suing, the facility's grievance procedure must be exhausted (42 U.S.C. § 1997e(a); Woodford; Ross; Roadmap 080). For state-law damages claims against a public entity or employee, a government claim must be presented (Gov. Code §§ 905, 911.2, 945.4; AR-S501, AR-096-S01, AR-096-S02; Roadmap 078); it is not required for § 1983 claims (Williams v. Horvath, AR-C08). For professional negligence against a health-care provider, Code Civ. Proc. § 364 notice applies (AR-096-S04; Roadmap 066). For a HIPAA access complaint, a prior written request to the entity is the fact that must exist (Toolkit 128.1). For a Title II private suit, no agency complaint is required (28 C.F.R. § 35.172(d)). Check Roadmaps 090/091 before suing any Wellpath debtor entity.

Limitation periods#

This page computes nothing. The administrative periods are agency-filing periods, not limitation periods for lawsuits, and filing within them does not extend any limitation period (Roadmaps 008, 082).

Evidence and records to obtain#

Key: H presently has lawfully; R statutory request; D discovery or subpoena only; P potentially privileged or private; K someone else must preserve but need not produce voluntarily (Roadmap 007); X must not access, copy or remove.

• The person's own grievances, accommodation requests, responses and appeal decisions; letters and notices received; the family's notes of calls and visits (H).
• The person's own health records from each provider (R; Health & Saf. Code § 123110, AR-S401; 45 C.F.R. § 164.524, AR-058-R01; Roadmap 083).
• Confirmation and transaction numbers and all correspondence from any federal agency (H once received; Worksheet 113).
• Published CRIPA findings letters, complaints, agreements, decrees and monitor reports from the Civil Rights Division website and court dockets (public; Roadmap 048.1).
• The county–contractor health-services contract, amendments and monitoring reports; grant records showing DOJ or HHS financial assistance (R; public records requests; Roadmaps 086, 087; Worksheet 123).
• State and local oversight records: § 12525 reports, § 10008 postings, BSCC inspection and death-review materials, grand jury reports (R; Roadmaps 064, 093, 097, 098).
• DCRA aggregate data (public; BJA); individual-level federal records (R under FOIA, subject to § 552(b)(6), (b)(7)(C)).
• Federal agencies' investigative and complaint files (R under FOIA, frequently withheld under § 552(b)(5), (b)(7)(A)); testimony or documents of federal employees in private litigation (D, subject to the agency's own procedures for demands, not opened here).
• The facility's policies, staffing records, video and electronic audit trails (K, then D).
• Other detainees' medical and accommodation records; peer-review and quality-improvement materials (P; D under protective order only; Evid. Code § 1157, AR-032-S04; Roadmap 085).
• Jail management systems, electronic health record systems, peer-review files and any patient chart other than one's own (X). A report to a federal agency never justifies accessing, copying or removing them; the HIPAA whistleblower permission in § 164.502(j)(1) is narrow, tied to covered-entity status and listed recipients, and is a counsel question before any disclosure.

Favorable and adverse facts#

Facts that tend to make a federal report actionable within an agency's jurisdiction: a dated, documented pattern affecting many people over time; written policies applied categorically; repeated written requests and refusals; consistent accounts from several sources; public records corroborating the pattern; a clear funding nexus for a funding-based complaint; a clear covered-entity status for a HIPAA complaint; a complaint filed within the regulatory period. Facts that tend to limit agency action: a single incident, however serious; a dispute about clinical judgment rather than access or discrimination; no funding nexus; uncertain covered-entity status; a disclosure within the correctional permissions; a complaint outside the period without good cause; reliance on records the reporter was not entitled to hold. None of these is a finding about any entity; they describe how the statutes and regulations frame an agency's authority.

Likely defenses#

In federal processes, respondents commonly contend that the agency lacks jurisdiction (not a public entity; not a covered entity or business associate; no federal financial assistance; a private facility whose only nexus is licensing or benefit payments, § 1997(2)); that a CRIPA matter involves no constitutional deprivation, as § 1997a(a) requires for correctional facilities, or no pattern; that § 1997b's prerequisites were not met; that a disclosure was permitted under § 164.512(k)(5); that a complaint is untimely; and, in disability matters, fundamental alteration, undue burden, direct threat or security (Roadmap 068). In private litigation that follows, defendants contend that federal documents are inadmissible or are not findings (Roadmap 048.1), that exhaustion was not completed and that a federal complaint is no substitute (Ross; Roadmap 135), and the defenses catalogued in Roadmaps 133, 134 and 141. The bankruptcy injunction affects claims against Wellpath debtor entities (Roadmaps 090, 091).

Causation#

Causation is not an element of any federal oversight process on this page. A CRIPA findings letter describing systemic conditions does not establish that those conditions caused any particular person's injury or death; a Letter of Findings in a disability matter addresses whether discrimination occurred; a HIPAA resolution addresses compliance. In a private action, causation follows the governing standard and is proved by records and experts (Roadmap 075). A federal document may supply context, notice or the existence of a condition, subject to admissibility (Roadmap 048.1), but it does not supply the causal link for an individual.

Damages and remedies#

The federal bodies on this page award nothing to detainees or families, with one qualification: a Title II Letter of Findings may describe a remedy that includes compensatory damages "where appropriate" (28 C.F.R. § 35.172(c)(2)), achievable through voluntary agreement or Attorney General enforcement, not by the complainant's own action. CRIPA and § 12601 authorize equitable and declaratory relief for the United States; HIPAA enforcement yields corrective action and civil money penalties against the entity; funding-based enforcement yields compliance or funding consequences; DCRA yields data and possible grant reductions to States; § 242 yields criminal penalties. A family's remedies come from private claims (Roadmaps 065, 068, 076; remedies matrix 096.2), and § 1997j ensures that a federal investigation neither delays nor prejudices them.

Discovery#

In private litigation, published federal documents are usually obtainable without discovery, and the facility's own records concerning matters a federal agency examined are obtainable from the facility through ordinary discovery, subject to privilege and privacy rules (Roadmaps 038, 084). Documents a county or contractor produced to a federal agency, and its communications with the agency, are sought from the party, not the agency. Federal agencies' own files and employees' testimony are subject to FOIA exemptions and to the agency's procedures for responding to demands, which this page did not open (description level). Agreements and monitor reports may describe data and audits whose underlying records become discovery targets (Roadmap 048.1). Discovery from a Wellpath debtor entity is subject to the bankruptcy court's orders (Roadmap 091).

CFMG/Wellpath-specific relevance#

Why this may matter in a CFMG/Wellpath setting. Public records describe a model in which California counties contract with private companies for jail health care (Roadmaps 086, 087). In that model, federal jurisdiction attaches by function, not by brand: CRIPA's definition reaches institutions "operated, or managed by, or provides services on behalf of" a political subdivision and names any "other person acting on behalf of" it as a possible respondent; Title II places responsibility on the public entity for services delivered "directly or through contractual, licensing, or other arrangements" (28 C.F.R. §§ 35.130(b)(1), 35.152(a)); HIPAA coverage depends on whether a given entity is a covered entity or business associate; § 504 and § 1557 depend on federal financial assistance to the particular program; and DCRA runs to States. Which entity held which role on a given date is a contract and records question (Roadmap 101). Entity precision governs every report: California Forensic Medical Group, Inc. is a California professional corporation not listed among the Wellpath Chapter 11 debtors (AR-B071), and Wellpath CFMG, Inc. is a debtor (Case No. 24-90556, jointly administered under lead Case No. 24-90533, Bankr. S.D. Tex.; AR-B12). Check Roadmaps 090/091 before suing any Wellpath debtor entity. Time-sensitive Fresno implementation lead (not a violation finding). The public DHCS Go-Live Partners and Status table viewed October 18, 2026 labels Fresno Adult Jail "RA Submitted – Pending DHCS approval" and gives October 1, 2026 in a column combining "Requested /Actual Go-Live Date"; Fresno youth correctional facilities are separately listed as pending with September 1, 2026. Because the table does not supply a visible row-level update timestamp, this is an as-displayed verification lead, not proof that the adult jail failed to launch on time, denied services, billed improperly or violated a mandate. Verify directly against DHCS dated readiness approval, actual operational go-live evidence and claims before drawing any conclusion. Source: https://www.dhcs.ca.gov/calaim-transforming-medi-cal/justice-involved-reentry-initiative/go-live-partners-and-statusjustice-involved-reentry-initiative/ (external site) (public state table accessed October 18, 2026). Nothing here states that any CFMG/Wellpath entity violated federal law, was or is the subject of a federal investigation, failed to report, or caused any injury or death.

Primary authorities#

Related roadmaps#

007, 008, 021, 022, 023, 042, 043, 044, 046, 048.1, 049, 053, 064, 065, 066, 068, 075, 078, 080, 082, 083, 084, 085, 086, 087, 088, 090, 091, 093, 096.1, 096.2, 096.3, 097, 098, 101, 128.1, 131, 132, 133, 135.

Companion worksheet#

Worksheet 107 (Protected Reports and Regulatory Complaints) is the primary companion: for each concern it records the body chosen, the jurisdictional basis, the filing date, the regulatory period source, the confirmation number and the outcome. Worksheet 113 (Agency Correspondence and Exhibit Index) holds every letter to and from a federal agency. Worksheet 121 (Grievance and Exhaustion Record) keeps the grievance track separate, because no federal complaint substitutes for it. Worksheet 120 (Claim, Notice and Limitation Source Tracker) records private-claim sources that federal reporting does not affect. Worksheet 123 (Public Records, Oversight and Contract Requests) records FOIA and public-records requests. No worksheet in the 115–124 range is dedicated to federal-pathway selection; Worksheet 107 can be extended with a federal-pathway selector that lists each concern against the seven bodies on this page and records, for each, jurisdiction confirmed or not, the period source and the filing source.

What this page cannot do#

It cannot say whether any federal agency will investigate, find, sue, settle or do anything at all; agencies exercise discretion that the statutes do not control. It cannot determine whether any jail, county, sheriff or contractor is a public entity, a covered entity, a recipient of federal financial assistance or a person acting on behalf of a political subdivision; whether any condition is egregious, flagrant or a pattern; whether any disclosure was permitted; or whether any complaint is timely. It cannot compute any period, exhaust any grievance, present any claim, or preserve any evidence. It states what the federal statutes and regulations authorize, routes each concern to the body that has authority over it, and marks clearly what a federal report does not do, so that a family does not mistake a report to Washington for the steps that protect a claim.