Hipaa - doctor shared my medical information with everyone at religious facility I went to the emergency room in March thinking I had Covid-19 and since I am young and healthy the doctors labeled me as having a panic attack and assumed I was on something and so they drew blood for a blood test and quickly found out I was on nothing and they gave me some prescription for coughing and the cold and sent me on my way. It turns out one of the emergency room doctors that looked at my blood sample goes to the same religious facility as me and he told everyone there about what had happened and people have been treating me significantly different and it wasn't until someone revealed that the doctor told everyone this. My question is, shouldn't this be a violation of hipaa? I thought doctors aren't supposed to share any sort of medical information with anyone? Location - Dallas, TX. What course of actions should I take? What course of actions can I take?
Gossiping about a patients medical information is a clear violation of the privacy rule, and significant enough that various HIPAA-compliance websites list this in their &quot;10 things for medical professional not to do&quot;.
There are, as far as I know, no &quot;FDA-approved&quot; vaccines against covid in the US. The FDA has given Emergency Use Authorization to some vaccines. This does not currently include the Johnson &amp; Johnson vaccine. It is impossible for a person to get the J&amp;J vaccine in the US, because it is not authorized, and J&amp;J does not distribute it. One could imagine an unauthorized foreign vaccine being smuggled into the US, but it would be illegal to distribute it. I assume that you specifically mean, can a person refuse to get a vaccination on the grounds that it only has an emergency authorization and is not actually approved: and can one sue an employer for firing you because you refused to get vaccinated? In general, the employer can fire for anything they want, unless you have an employment contract that limits the grounds for termination. There are discrimination-based grounds that they cannot use, such as race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, disability, age (age 40 or older), or genetic information at the federal level. Mississippi has no specific employment discrimination laws. Other that that, an employer can fire an employee for any reason, or no reason (Mississippi is what's known as an &quot;employment at will&quot; state). There are some state restrictions where it is prohibited for an employer to fire an employee for engaging in a specific required activity such as being called for jury duty or being called to military duty. An employer could not require an employee to break the law, but that is not applicable here.
There is no such legal requirement coming from federal or NY state law. Doctors can refuse treatment when the patient is abusive or the matter is outside the scope of their practice, and that can include a test which requires skills, equipment or a contractual relationship that they don't have. Also if a procedure conflicts with their professional duties (that is a large loophole), they do not have to perform a requested service: an example is prescribing antibiotics for a viral infection. There is also a federal regulation known as the conscience rule which is conceivably applicable. If the test is medically unnecessary (e.g. a covid antibody test &quot;just for the heck of it&quot;) it would be illegal for the physician to perform the test and bill the insurance, though not illegal to do the test and have the patient pay, unless their agreement with the insurance company precludes any and all unnecessary treatments (regardless of whether the patient pays). That is, you cannot compel the doctor to breach his contract with the insurance company. If they do perform the test, then according to HIPAA, they have to tell you the results.
Following you around with the intent of harassing you is stalking. I don't know whether there's going to be a law actually requiring social distancing in Florida. In other states, I've seen laws set up to make it a crime to violate an order of the Director of Public Health or something like that. I don't know whether Florida actually has an order requiring social distancing by the general public.
There is no prospect for equitable relief in such an outcome. The Texas state government enjoys sovereign immunity, except as specified under the Tort Claims Act. Under that law, immunity is waived only in the case of damage caused by negligence of a state employee, and is limited primarily to vehicle accidents and physical injuries. So the state cannot be sued for passing a law found to be unconstitutional. An individual would not enjoy such immunity, but given the law, there is no identifiable defendant to seek relief from (everybody is a potential defendant). An former abortion provider who now declines to perform an abortion can't be sued, because doctors in general have no obligation to perform particular medical procedures (most doctors in Texas won't perform an abortion, even before SB8), and the course will not render a judgment against a doctor on the grounds that they obeyed an existing law but should have known that it would be found unconstitutional.
The federal Health Insurance Portability and Accountability Act of 1996 (HIPAA) may apply to you and provide certain rights. HIPAA does seem to cover part of this, though if it covers you particularly and the lab that performed the test is a separate question. On the Department of Health and Human Services website discussing HIPAA, they outline requirements discussing pre-employment drug tests. Basically, your authorization is required in order to release the results of the drug test to your employer and there is nothing prohibiting the employer from conditioning employment on your provision of that authorization. This seems to indicate that the drug test is a medical record. In another section on the same web site concerning your medical records, it outlines that the Privacy Rule gives you the general right to inspect, review and receive a copy of your medical records if the health care provider is covered by the Privacy Rule. You can read about the privacy rule on yet another section of that web site. Generally speaking, the privacy rule applies to any health care provider that transmits health records electronically. Certain exceptions to the rule apply, however determining what those exceptions happen to be is a more difficult task. You will notice from the hhs.gov web site that any entity that is covered by the privacy act is required to give you a privacy practices notice (with certain exceptions). If you didn't receive a privacy practices notice then the entity conducting the drug test is probably not covered by HIPAA. If you did receive a privacy practices notice then the entity conducting the test is covered by HIPAA and you have a right to review your records.
You may not assault a violator, you may notify the authorities. If your state has passed a law making it a felony to be outside without a mask, you can perform a citizen's arrest (but no state has such a law). So you cannot take the law into you own hands, and you run the risk of being arrested on felony assault charges if you do. There is always a significant risk that you are wrong about whether the order applies to a particular individual. You can always file a lawsuit, but you'd be in highly-experimental legal territory in terms of succeeding, specifically the claim that the person endangered your health (you can't sue on behalf of others, except e.g. as a parent on behalf of harm done to a child). For instance, nobody has successfully sued another person for going out in public having the flu on the grounds that they unreasonably put plaintiff at risk. You would have to experiment with that argument, to show that going out with a mask is reasonable and going out without a mask is unreasonable.
Article 640 of the Italian Penal Code under the heading &quot;Crimes against property by fraud&quot; begins (via Google Translate): Anyone who, by artifice or deceit, by misleading someone, procures an unfair profit to himself... And the article (cited by the OP in a comment) says the suspect... ...worked in the health sector and had been suspended from his job because he had refused to be vaccinated against COVID-19. The jab is mandatory for all health workers. So, it seems the allegation is that he intended to &quot;profit&quot; by gaining a COVID-19 vaccine certificate and therefore unjust employment after attempting to use the silicone patch to deceive the health worker. Edit following @jkej's comment observing that the alleged unfair profit was never actually procured. The more likely charge - depending on the actual evidence - would seem to fall under Article 56 which begins under the heading Crime Attempted (again via Google Translate): Whoever carries out suitable acts, directed in an unequivocal way to commit a crime, is liable for an attempted crime, if the action is not carried out or the event does not occur.