A continued problem for HCLA plaintiffs seems to be complying with the requirement to provide a HIPAA authorization with their pre-suit notice. In Dolman v. Donovan, No. W2015-00392-COA-R3-CV (Tenn. Ct. App. Dec. 23, 2015), another HCLA claim was dismissed due to the inadequacy of plaintiffs’ HIPAA authorizations.
Plaintiffs’ claims related to the treatment of their father at Methodist Hospital. In their suit, plaintiffs named two doctors, Methodist LeBonheur Healthcare, Memphis Vascular Center, and Memphis Radiological, P.C. as defendants. In addition to the named defendants, pre-suit notice was served on an additional three parties—another doctor, Methodist Healthcare Germantown, and Mid-South Pulmonary Specialists. “The notice letters were accompanied by three Methodist LeBonheur Healthcare medical records authorizations forms. Substantively, the three authorizations were identical, but each was signed by a different [plaintiff].”
After suit was filed, defendants moved to dismiss, asserting that the authorizations did not comply with the HCLA statute in that they “only allow[ed] the release of records from Methodist LeBonheur Healthcare” and “did not enable them to obtain the records from ‘each provider being sent a notice’ as required by statute.” In response, plaintiffs argued that the HIPAA authorizations were compliant because they authorized the release of records from “Methodist LeBonheur Healthcare and its affiliates,” and that “the doctors and other named healthcare providers were ‘affiliates’ of Methodist….” Finding that the authorizations were not statutorily compliant, the trial court dismissed the case, and the Court of Appeals affirmed.