Johns Hopkins settles privacy breach lawsuit for $190M
Back in February 2013, we learned of a horrific privacy breach in which a gynecologist had been secretly recording his female patients. His conduct had been reported to the hospital by a female co-worker and he was fired. The files were found in his home after he committed suicide. In March of 2013, some of his patients filed a potential class action lawsuit.
Today, Justin Fenton of the Baltimore Sun reports that Johns Hopkins Hospital has reached a proposed settlement for a lawsuit filed last fall. The settlement involves $190million. As Fenton notes, the settlement, if approved, might be the largest of its kind:
The settlement may be the largest of its kind. A class-action suit involving a Delaware pediatrician convicted of recording assaults on hundreds of children led to a $120 million settlement in 2012. That same year, a Connecticut hospital settled for about $50 million with 150 victims of an endocrinologist who used a medical study as a pretense to take obscene photographs of children.[…]
In court papers, plaintiffs also contended that Levy “engaged in doctor-patient boundary violations during the course of his patients’ treatment,” including “an excessive number of unnecessary pelvic exams and engaging in inappropriate physical contact.” Some said Levy practiced without medical professionals on hand as observers, a routine hospital practice for the safety of patients and doctors.
Hopkins said it had identified more than 12,500 potential victims.
Somewhat surprisingly, this incident does not seem to be recorded at all in HHS’s public breach tool. It’s therefore possible that OCR is still investigating this incident and that Johns Hopkins could be facing other consequences apart from the lawsuit.