HIPAA Helper: What Every Patient Needs To Know About Privacy Rights
As a health care attorney, I frequently receive calls from potential clients involving violations of the Health Insurance Portability and Accountability Act (HIPAA). Many times, either through neglect or oversight, a client’s protected health information (PHI) is improperly disclosed – a pharmacist may dispense a client’s medication to another individual, a billing statement may go to the wrong address, or a physician may disclose a patient’s health information under the mistaken belief that a patient authorized the same.
Many times the violations can be particularly upsetting, especially if the information disclosed reveals that a patient has a sexually transmitted disease, if adoption records are involved, or if the information was disclosed to an undesirable third party like an employer or an estranged family member.
Regardless of the nature of the violation, clients who feel their medical privacy has been jeopardized usually have one question – what can I do?
What can I do?
First, it is important to understand that HIPAA does not currently include a private right of action for privacy violations. This means that an individual does not have a right to file a lawsuit against an offending party simply because his/her PHI was improperly disclosed.
Depending on the nature of the violation and resulting harm, a client may be able to bring a tort-based cause of action against an offending party under the common law for a privacy violation. However, such cases are generally not viable unless a party is able to demonstrate legitimate emotional and/or financial harm. One common example is where a health care provider discloses sensitive health information, such as details about a sexually transmitted disease or HIV/AIDS, to a patient’s employer or family, thereby causing the patient to be terminated or ostracized.
After the jump - other remedies
Continue reading " HIPAA Helper: What Every Patient Needs To Know About Privacy Rights " »