Visitor Question

Violation of HIPAA Privacy Rule – Disclosure as Potential Claim?

Submitted By: M (North Carolina)

In two cases, a licensed professional counselor violated HIPAA by sharing information with a third party about a client who had not given written permission to do so. Both incidents happened within the past year.

In the first case, the client knows about the disclosure.

In the second case, the client does not know about the disclosure, but could ask in the future.

Which, if either, of these scenarios would be considered a potential claim and therefore reportable to the professional liability insurance company? How would one go about reporting the violation? Can one file a claim for compensation against the counselor’s insurance company for these violations? Thank you.

Disclaimer: Our response is not formal legal advice and does not create an attorney-client relationship. It is generic legal information based on the very limited information provided. Do not rely upon the information in our response, or anywhere else on this site, when deciding the proper course of a legal matter. Always get a personalized case review from a local attorney.


Dear M,

HIPAA is an acronym for the Health Insurance Portability and Accountability Act of 1996. The HIPAA law governs electronic exchanges of health data. Moreover, HIPAA has an enforcement division which monitors violations. Violations of can result in fines up to $50,000.00 per violation, and up to a year in prison.

In both scenarios you present, the counselor appears to have violated confidentiality. As long as a health care provider releases private health information (PHI) without consent of the patient or legal guardian, it’s a violation, whether the patient knows about it or not.

To file a complaint go to the US Health and Human Services website. Once there, click on “Health Information Privacy Complaint Form Package” on the right side. This will take you to the area where you will enter your personal contact information and details of the actions supporting your complaint.

Although HIPAA allows for federal civil and criminal penalties for violations, it does not provide a private right to sue a doctor or other healthcare provider for a violation. There have been a few successful lawsuits, but these are very rare, and you would definitely need an attorney to pursue a private cause of action.

Learn more here: Claims for HIPAA Violations

The above is general information. Laws change frequently, and across jurisdictions. You should get a personalized case evaluation from a licensed attorney. Find a local attorney to give you a free case review here , or call (888) 647-2490.

Best of luck!


How Much is Your Injury Claim Worth?

Find out now with a FREE case review from an attorney…

  • Your Accident
  • Your Claim
  • Contact Info
  • Your Evaluation

Leave a Comment

Don’t ask a personal injury question here – comments are not reviewed by an attorney. Ask your question on this page. Required fields are marked *