Where plaintiff only named one provider as a defendant in an HCLA case, but sent pre-suit notice to forty healthcare providers, a HIPAA-compliant medical authorization was required to be sent with her pre-suit notice. Further, a HIPAA form that left blank the section stating who could disclose records to defendant did not substantially comply with the statute.
In Moore-Pitts v. Bradley, No. E2018-01729-COA-R3-CV (Tenn. Ct. App. Dec. 9, 2019), plaintiff filed an HCLA claim against a single defendant. Before filing suit, however, plaintiff sent pre-suit notice to approximately forty healthcare providers. With her pre-suit notice, plaintiff attached a HIPAA authorization, but the authorization left blank the portion listing “the name of the person or entity authorized to provide records to Defendant.” Attached to the authorization was a list of the forty providers who had received the notice.
Defendant filed a motion to dismiss based on the allegedly insufficient HIPAA authorization. The trial court ruled that the authorization provided did not comply with the statute, that plaintiff was thus not entitled to the 120-day extension of the statute of limitations, and that plaintiff’s complaint should be dismissed as time barred. The Court of Appeals affirmed.