The suit sought damages for negligence, breach of contract and invasion of privacy by public disclosure of embarrassing private facts, according to a court report. Typed notes from 2008 patient visits were searchable on Google after an unintentional error was made by a subcontractor of Henry Ford’s transcription company. Information included patients’ names, medical record number, date of visit, appointment location, physician name, summary of visit and diagnoses, according to the report. The lead plaintiff’s records contained information regarding her sexually transmitted disease.
Henry Ford removed the patient records in early December 2009, but does not know how long the patient records were visible online. They provided a hotline for patients with exposed medical records. There is no evidence the records were viewed or used for identity theft, according to the report.
Three judges ruled invasion of privacy must be intentional and dismissed damages as speculative. The appeals court reversed class certification on the lawsuit in favor of Henry Ford Health Systems and their transcription company, according to the report.
More articles on data breaches:
Tribeca Medical Center reports data breach due to stolen records
Illinois hospital blackmailed with release of patient data
At the Becker's 11th Annual IT + Revenue Cycle Conference: The Future of AI & Digital Health, taking place September 14–17 in Chicago, healthcare executives and digital leaders from across the country will come together to explore how AI, interoperability, cybersecurity, and revenue cycle innovation are transforming care delivery, strengthening financial performance, and driving the next era of digital health. Apply for complimentary registration now.