{"id":355844,"date":"2016-04-04T10:46:17","date_gmt":"2016-04-04T15:46:17","guid":{"rendered":"https:\/\/ability-fl-prod.internetbrands.com\/ability-law\/healthcare\/patient-rights\/what-can-i-do-after-an-improper-disclosure-of-medical-records.html"},"modified":"2026-08-31T13:41:00","modified_gmt":"2026-08-31T18:41:00","slug":"what-can-i-do-after-an-improper-disclosure-of-medical-records","status":"publish","type":"page","link":"https:\/\/www.findlaw.com\/healthcare\/patient-rights\/what-can-i-do-after-an-improper-disclosure-of-medical-records.html","title":{"rendered":"What Can I Do After an Improper Disclosure of Medical Records?"},"content":{"rendered":"\n
\n

What Can I Do After an Improper Disclosure of Medical Records?<\/h1>\n\n
\n
\n By Melissa McCall, J.D.<\/a> | Legally reviewed by Aviana Cooper, Esq.<\/a>\n | Last updated\n
\n \n <\/i>\n Legally Reviewed\n <\/summary>\n\n
\n

This article has been written and reviewed for legal accuracy, clarity, and style by FindLaw\u2019s team of legal writers and attorneys<\/a> and in accordance with our editorial standards<\/a>.<\/em><\/p>\n\n <\/div>\n <\/details>\n\n

\n \n <\/i>\n Fact-Checked\n <\/summary>\n\n
\n

The last updated date refers to the last time this article was reviewed by FindLaw or one of our contributing authors<\/a>. We make every effort to keep our articles updated. For information regarding a specific legal issue affecting you, please contact an attorney in your area<\/a>.<\/em><\/p>\n\n <\/div>\n <\/details>\n<\/section>\n\n\n

\n
\n
\n

Key Takeaways<\/h2>\n

An improper disclosure occurs when a healthcare provider or covered entity mistakenly shares protected health information without patient consent, violating HIPAA privacy rules. Although federal law does not provide individuals with a private right to sue under HIPAA, patients can file administrative complaints with the Office for Civil Rights (OCR) or relevant professional boards.<\/span><\/p>\n\n <\/div>\n <\/div>\n<\/div>\n\n

\n

Protecting patients’ privacy rights is an essential aspect of public health. The Health Insurance Portability and Accountability Act of 1996 (HIPAA) protects patient privacy. Under this federal law, patients have the right to their medical records. This includes the right to “inspect, review, and receive a copy of their medical records.”<\/p>\n

Patients have remedies under federal law for improper disclosure of their medical records. However, this does not include the patient’s right to sue for compensation.<\/p>\n

This article outlines improper disclosure of medical records and patient privacy rights. It also looks at medical records and exemptions to privacy rules. You’ll also learn about possible legal remedies for improper disclosure of medical records. You can also talk to a healthcare attorney near you<\/a> to discuss possible legal remedies in your state.<\/p>\n

What Is an Improper Disclosure of Medical Records?<\/h2>\n

Here’s an example: a doctor faxes a patient’s HIV status<\/a> to the patient’s employer. They should have faxed it to their new health care provider.<\/p>\n

Although unintentional, this constitutes an improper disclosure of medical records. The provider sent the patient’s medical status to the wrong party. Improper disclosure includes unintentional acts, security breaches, and improper maintenance of patient records.<\/p>\n

HIPAA and Medical Records<\/h2>\n

HIPAA is a federal law<\/a> that establishes data privacy protections. It also provides security safeguards for a person’s identifiable health information. Health data includes more than a patient’s essential health information. It consists of a patient’s Social Security number or date of birth. This data\u2014protected health information\u2014is often part of a person’s medical records.<\/p>\n

Covered Entities Under HIPAA<\/h3>\n

HIPAA requires health care providers, health insurance companies, and other “covered entities<\/a>” to get patient consent before sharing their medical information. A covered entity is a health provider, health plan, or health clearinghouse. Health providers include:<\/p>\n