In what’s being touted as a national precedent, the Indiana Court of Appeals upheld a $1.4 million trial court verdict for a Walgreens customer whose prescription information was leaked by a pharmacist to a third party. This may be one of the first times a health care provider was found liable under state negligence law for an employee’s failure to follow the federal Health Insurance Portability and Accountability Act (HIPAA)—and serves as a cautionary tale for employers in every state.
The following is a guest blog post by Lynn Hollenbeck. Lynn is a litigation attorney with Bunting Drayton & Alward in San Francisco, with expertise in premises defense, insurance defense, asbestos defense, and construction defect.
For defense counsel, plaintiff’s medical records often contain unexpected sources of information beyond examination findings, diagnoses, and prognoses. You may not find the dispositive document that disproves causation, but the records can bolster other issues in the case.
In March, at long last, the US Department of Health and Human Services released a final Omnibus Rule on privacy and security of personal health information. Some have labeled the Rule a “sweeping reform,” but, in fact, it largely just replaces and finalizes prior “interim” final rules and proposed rules. But there are some important changes you should know about.