What to do when an employer violates the HIPAA law?

Get Legal Help Today

Compare Quotes From Top Companies and Save

secured lock Secured with SHA-256 Encryption

What to do when an employer violates the HIPAA law?

My husband recently had a physical for the fire dept he is in; his hearing came into question. He wore hearing aids prior to being hired and it has never been an issue until this. He is very self-conscious of this and wanted no one to know, but today, another firefighter came up to him and asked, “So, you can’t get on the part-time side because of your ears?” Obviously, the supervisors have been spreading the word of my husband’s medical history. What can be done?

Asked on December 16, 2010 under Employment Labor Law, Illinois

Answers:

S.L,. Member, California Bar / FreeAdvice Contributing Attorney

Answered 13 years ago | Contributor

Your husband could sue his employer for invasion of privacy.  One aspect of invasion of privacy is the public disclosure of private facts which occurred here when his confidential medical records were disclosed to other employees.

In addition to a cause of action (claim) for invasion of privacy, the lawsuit should also include a separate cause of action for negligent infliction of emotional distress.  Your husband's employer owed your husband a duty of care to maintain the confidentiality of his medical records.  Disclosing the information breached the duty of care and was the actual and proximate cause of your husband's emotional distress.  Actual cause means but for the disclosure of the medical records, would your husband have suffered emotional distress?  If the answer is no, then actual cause has been established.  Proximate cause means despite the disclosure of the medical records was there any unforeseeable intervening event which would relieve the employer of liability for negligence?  The answer appears to be no, which means that proximate cause has been established.  Therefore, the employer is liable for negligence (negligent infliction of emotional distress in this case). 

Intentional infliction of emotional distress as opposed to negligent infliction of emotional distress would be more difficult to prove in this case because the employer would have had to have committed an  extreme and outrageous act (disclosing the medical records) intended to cause and which did cause emotional distress.  Establishing the requisite intent on the part of the employer would be difficult.  That is why it would be advisable to pursue negligent infliction of emotional distress instead of intentional infliction of emotional distress in the lawsuit. 


IMPORTANT NOTICE: The Answer(s) provided above are for general information only. The attorney providing the answer was not serving as the attorney for the person submitting the question or in any attorney-client relationship with such person. Laws may vary from state to state, and sometimes change. Tiny variations in the facts, or a fact not set forth in a question, often can change a legal outcome or an attorney's conclusion. Although AttorneyPages.com has verified the attorney was admitted to practice law in at least one jurisdiction, he or she may not be authorized to practice law in the jurisdiction referred to in the question, nor is he or she necessarily experienced in the area of the law involved. Unlike the information in the Answer(s) above, upon which you should NOT rely, for personal advice you can rely upon we suggest you retain an attorney to represent you.

Get Legal Help Today

Find the right lawyer for your legal issue.

secured lock Secured with SHA-256 Encryption