It depends. HIPAA is a federal law that applies mostly to care providers, and the Privacy Rule is a part of that statutory scheme. Under the Privacy Rule, a care provider is only allowed to use or disclose your information in certain situations, particularly in connection with their operations, or with your authorization. But even if a care provider does release your information, there is no provision in the law that allows you to sue in court for a breach of privacy. An individual who believes that his or her HIPAA rights have been violated must follow the administrative procedure by making a report to HHS.
Answered on Feb 04th, 2013 at 8:09 PM