Skip to main content

Do I have a HIPAA violation case?

Arlington, TX |

My employer called the Emergency Room where my 5 year old daughter was seen by a physician and asked for information regarding her doctors excuse from school (my employer thought I altered the document and was trying to obtain proof it was altered).. Upon my termination for "Misrepresentation" I found out some things I'm uncomfortable with. According to the evidence packet my employer provided me there are emails between my manager and a charge nurse of the hospital. First of all the nurse is communicating with my manager using his personal email address.The first email came from my manager asking the nurse to verify the document. The second email was from the nurse stating that he reviewed the medical charts and thinks the dates are questionable but not for sure it has been altered.

+ Read More

Attorney answers 3


First, you have to understand, there is no private right of action under HIPAA, so you will never have a HIPAA case, only the government can pursue the case. The government office that this responsible for this is the Office of Civil Rights in the Department of Health and Human Services. The site you can find more information at is:

As a result, you will be unable to pursue any damages directly from the violation.

That being said, it does appear as if the hospital might have violated your daughter's privacy rights. (Not your employer because employers are not covered entities under the law). What you should do is complain to the hospital's Privacy Officer. You can learn who this is by finding their "Notice of Privacy Practices", either on their website or by writing and asking for a copy.

Hospitals view privacy violations very seriously, and they will follow up, but the likelihood or any recovery by you doesn't really exist.

All that being stated, you might want to speak to an attorney licensed in your state to make certain that state privacy laws do not exist.

I am licensed in New Mexico and Pennsylvania, and therefore any discussion of issues related to other states must considered within that context. In addition, my comments are not intended to create a legal representation but merely to respond to the limited facts presented by the question. Any opinion herein is not meant as a precise statement of legal rights or as a recommendation of any particular course of action. A more complete legal review can be obtained through local counsel.


Your question seems to ask if you can sue, which you cannot. As my colleague notes, you can file a complaint witjh the hospital.

We do not have a client/attorney relationship until you make an appointment, we discuss your case face to face, I accept a retainer, and we explictly agree to enter into representation.


Bringing the matter to the attention of the Hospital's Privacy Officer should result in an investigation, a response to you about what's discovered and could also prevent the same thing from happening to someone else. Not a "case" - but maybe some satisfaction.

This response is intended to provide general information, but not legal advice. The response may be different if there are other or different facts than those included in the original question. See for more information on why this communication is not privileged or create an attorney-client relationship.

Can't find what you're looking for?

Post a free question on our public forum.

Ask a Question

- or -

Search for lawyers by reviews and ratings.

Find a Lawyer