Medical Privacy Violations and Medical Malpractice

Attorney Blog

If we think about a typical medical malpractice claim, we are likely to imagine a situation in which a patient suffered a physical harm as a result of a healthcare professional’s negligence. Yet according to a recent article in NPR, medical negligence cases may also extend to medical privacy violations in which an entirely different type of injury occurs. Indeed, data breaches can cause serious harms to patients and may in fact amount to medical malpractice.

How do data breaches impact patients, and who is liable when there is a violation of the Health Insurance Portability and Accountability Act (HIPAA)?

Patient Injuries Caused By Data Breaches

In our current age of technology and social media, violations of patient privacy can have very real effects in a patient’s life. For instance, the NPR article discusses a situation in which a patient visited her doctor’s office and soon thereafter experienced a serious breach of her privacy rights. The patient logged onto Facebook to discover a message that pertained to private information in her medical files. The public post exclaimed, “PPL WORLD WIDE,” the patient “IS HPV POSITIVE!.” The social media post not only gave the patient’s full name alongside information about her human papillomavirus diagnosis, but it also “included her date of birth.” Human papilloma virus, the article explains, is “a sexually transmitted disease that can cause genital warts and cancer.”

How did this information become public? The person who posted the information on Facebook was a “patient care technician at the local hospital where [the patient] was treated,” and the two formerly had been friends. However, the patient care technician illegally accessed the patient’s file and exposed information from it—in violation of HIPAA—for the public to see. As NPR explains, HIPAA makes it “illegal for healthcare providers to share patients’ treatment information without their permission.”

After the privacy breach, the patient complained to a supervisor at the healthcare facility, but all she received was an apology letter. Should the federal government be responsible for taking enforcement actions when HIPAA is violated? Or should patients expect to be compensated for injuries caused by data breaches by filing medical malpractice lawsuits?

Filing a Medical Malpractice Claim for a Privacy Violation

Each year, the Office for Civil Rights (which is part of the U.S. Department of Health and Human Services and is currently responsible for enforcing HIPAA) receives more than 30,000 complaints about medical privacy violations. In large part, the agency has focused on large-scale data breaches that impact hundreds or even thousands of patients when, for instance, a healthcare facility is hacked. Yet as the article points out, there is often little actual harm in these cases—there is “much information exposed but little exploited.”

Cases like the individual patient’s tend to be those in which more serious harms occur.  According to the director of the Office for Civil Rights, these occurrences are exactly “the kinds of harm that HIPAA is intended to address.” In some states, patients have begun filing medical negligence claims to seek compensation for these injuries, and in some instances, juries have awarded millions of dollars in damages.

If you suffered an injury caused by a medical data breach, you may be eligible to file a medical malpractice lawsuit. You should discuss your situation with a dedicated Naperville medical malpractice attorney as soon as possible. Contact Woodruff Johnson & Evans Law Offices today to learn more about our services.


Very satisfied

Very satisfied.     – Maricela […]

DJ (Dexter Evans) was amazing.

DJ (Dexter Evans) was amazing. He and Kylene communicated well and reached out often. This is my 2nd time using him and will never go anywhere else for my attorney needs. – Shanita […]

Highly recommended!

Highly recommended! Smooth process and great communication. Two thumbs up!   – Marek P.   […]

Big thank you to Attorney DJ Evans

Big thank you to Attorney DJ Evans for helping me with my PI case. Had a terrible car accident which I was not at fault for legally but my car was totaled and I sustained injuries that impacted my work. The at faults insurance tried to manipulate me into taking 2k which was ridiculous for […]

Jay Johnson was fabulous

Jay Johnson was fabulous, he kept me up-to-date and informed of every step. Very happy with his service and I would highly recommend him.       – Dawn S. […]

Very helpful.

Very helpful. I was able to put most of it away into an emergency fund.         – Christine […]

Got a Settlement Quicker Than I Expected and Better Than I Expected!

My second time with Leandro A. at Woodruff Johnson and Evans. Another great job. Didn’t have to talk with work comp at all this time since I told work comp I don’t trust them after the first occurrence with them. Got a settlement quicker than I expected and better than I expected. Thanks to Leandro […]

Attorney Dexter Evans: Professional, Responsive and Took Care of Business. Highly Recommended. You Will Not Be Disappointed!

Dexter Evans handled my case for a motor vehicle incident. I would like to inform you that he was very professional, responsive, and took care of business. Whenever I had a question they were very quick to respond and handled everything for me. If it wasn’t Dexter then Nicole was right there. I highly recommend […]

Go to the Doctor. Do the Tests. Get the Diagnostics. Hire Leandro Alhambra!

Leandro Alhambra took on my workman’s comp case and did a great job getting a good return back. I had him take on the case late (2 years after the incident) and he still was able to provide a good amount of compensation. Advice to anyone reading: go to the doctor, do the tests and […]

Leandro A. Alhambra Fights to Get Every Dollar for his Clients

I used Leandro A. Alhambra for my workmans comp. case. I see in him that he fights to get every dollar for his clients to be satisfied of the […]

View All Testimonials

Get Your Free Consultation

"*" indicates required fields