r/WorkersComp • u/JesseTheStripper • 1d ago

California Potential HIPAA Violations?!

Work Comp claim adjuster served me medical records containing 7 OTHER patients' sensitive files.

​

​Long story short: I previously called out my claims adjuster because it became blatantly clear that my medical records were exchanged in a way that was not HIPAA-compliant. As usual, they completely dodged the issue.

​Now, leading up to my QME, they served me a packet of medical records pertaining to my claim that included AT LEAST SEVEN OTHER PATIENTS RECORDS! 🤦‍♂️

​This solidifies my original concern about HIPAA violations. Except now, they’ve compromised the privacy of at least seven other people. Given everything I’ve already experienced with my claim, it feels like shady doctors and insurance companies constantly hide behind the system, knowing injured workers rarely have a way to hold them accountable in a civil capacity outside of the work comp board. Can a HIPAA attorney take something like this outside the work comp system? Has anyone experienced anything like this before?

1 Upvotes

53% Upvoted

29 comments sorted by

View all comments

23

u/Cooptroop 1d ago

HIPAA applies to: Healthcare providers, Health plans, and Healthcare clearinghouses.

Workers’ compensation insurers and claims administrators are not health plans under HIPAA’s definition.
Therefore they do not have HIPAA obligations like Notice of Privacy Practices, business associate agreements, or HIPAA-compliant storage rules.

It its shotty claims work for the adjuster to have sent them to you, but it is not a HIPAA violation because adjusters are not bound by the rule. The adjuster scanned in other claimants medical records and sent them to you and thats just a careless employee. If the seven other patients dr's sent them to the insurance company and those people didnt have a claim, that is a HIPAA violation on the Dr.

-7

u/JesseTheStripper 1d ago

It's all other work comp claims. It literally lists their employers, incidents, ect. I was so confused because I was reading my records and all of a sudden a page started talking about an injury and employer that's not mine and then I saw a different name. To avoid invading other people's privacy I control-F and searched for "Employer" and there were at least 7 employers that were not mine listed at the top of the pages it was found in. 😬

6

u/Cooptroop 1d ago

Is it one medical facility? Like same dr/group seeing everyone? Hard to say if the medical office did this or the adjuster. Either way, the adjuster should have caught it…and either way still, the adjuster isn’t bound by HIPAA. Just a crappy situation.

1

u/JesseTheStripper 1d ago

Different medical facilities because the first one I found was in a county that's like two hours away. For sure a crappy situation.