HIPPA Creates No Private Right of Action for Violation of the Privacy Rule

By Michael Reiter, Attorney at Law

When I was Assistant City Attorney for the City of Redlands, I had the unenviable task of making sense of the HIPAA Privacy Rule, which is found at 45 CFR Part 160 and Subparts A and E of Part 164. One thing that should be mentioned is this:

HIPAA itself does not provide for a private right of action, see 65 Fed.Reg. 82601 (Dec. 28, 2000)(“Under HIPAA, individuals do not have a right to court action.”)   Webb v. Smart Document Solutions, LLC (9th Cir. 2007) 499 F.3d. 1078, 1082.

There may be some relief in state unfair competition law, but not in federal law, and not as the basis for a 42 U.S.C. section 1983 case.  Therefore, it may be difficult to find an attorney, outside of a class action, to take a case if someone violates the HIPAA privacy rule.

The information you obtain at this blog is not, nor is it intended to be, legal advice. No attorney-client relationship is established by reading or commenting on this blog. You should consult an attorney for advice regarding your individual situation.