DataBreaches.net

DataBreaches.net

The Office of Inadequate Security

Menu
  • Breach Laws
  • About
  • Donate
  • Contact
  • Privacy
  • Transparency Reports
Menu

NY's highest court rules HIPAA trumps Kendra's law

Posted on May 11, 2011 by Dissent

Alison Frankel of Reuters reports:

U.S. privacy laws bar release of a mental health patient’s records as part of an effort to compel outpatient treatment unless the disclosure is authorized by the patient or a court, the New York Court of Appeals ruled on Tuesday.

It was the first time a state’s highest court had ruled on the scope of the Health Insurance Portability and Accountability (HIPAA) Act’s privacy provisions in an involuntary mental health treatment proceeding, said the patient’s lawyers, Scott M. Wells and Dennis Feld of the New York Mental Hygiene Legal Services.

The ruling was In the Matter of Miguel M. The New York City Department of Health and Mental Hygiene sought in 2007 to compel Miguel M. to receive mental health treatment under Kendra’s Law, a 1999 New York statute that permits public officials to demand outpatient treatment orders for mental health patients who have been hospitalized after failing to comply with treatment plans.

At the Supreme Court hearing on Miguel M.’s treatment order, counsel for the city asked to introduce into evidence records of the patient’s two recent hospitalizations for schizoaffective disorder. Although the city conceded that the records had been obtained without the patient’s consent or a court order, it argued that the disclosure was permissible under Kendra’s Law.

Miguel M.’s counsel opposed the introduction of his hospital records, citing HIPAA’s privacy strictures. After briefing on the question, the trial court admitted the records, finding that HIPAA permits the disclosure under a provision authorizing public health officials to collect information in order to prevent disease or injury or to conduct a public health investigation or intervention. An intermediate appellate court upheld the ruling.

But in Tuesday’s decision, the Court of Appeals found that neither of those exceptions to HIPAA’s presumption of privacy apply in this case.

Read more on Reuters.

I’m really pleased to see this decision.

Related Posts:

  • Nassau officials say privacy laws hinder probes
  • Westport doctor can be sued for confidentiality…
  • Fla. Court Wrongfully Compelled Medical Treatment of…
  • Court Overturns Presuit Patient Authorization…
  • Iowa Supreme Court: Parents cannot access minor…

Post navigation

← Man who solicited patient records from University Medical Center of Southern Nevada employee sentenced to prison
(follow-up) Romanian national sentenced in PNC skimming case →

Sponsored or Paid Posts

This site doesn’t accept sponsored posts and doesn’t respond to requests about them.

Have a News Tip?

Email:

Breaches[at]Protonmail.ch
Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Telegram: @DissentDoe

Browse by News Section

Latest Posts

  • Cybersecurity: Federal Agencies Made Progress, but Need to Fully Implement Incident Response Requirements (GAO Report)
  • Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers
  • CBIZ KA Notice of Data Privacy Incident (Prime Healthcare)
  • Seeking clarification on Maine’s data breach notification statute
  • East River Medical Imaging notifies 605,809 patients of breach
  • Russian hackers exploiting Outlook bug to hijack Exchange accounts
  • Britain dismisses report claiming Sellafield nuclear site hacking, says no malware exists on our system
  • 23andMe data breach: Hackers accessed data of 6.9 million users

Please Donate

If you can, please donate XMR to our Monero wallet because the entities whose breaches we expose are definitely not supporting our work and are generally trying to chill our speech!

Donate- Scan QR Code   Donate!

Social Media

Find me on Infosec.Exchange.

I am also on Telegram @DissentDoe.

RSS

Grab the RSS Feed

Copyright

© 2009 – 2023, DataBreaches.net and DataBreaches LLC. All rights reserved.

HIGH PRAISE, INDEED!

“You translate “Nerd” into understandable “English” — Victor Gevers of GDI Foundation, talking about DataBreaches.net

©2023 DataBreaches.net