815 S.E.2d 474
W. Va.2018Background
- Jill C. Barber sued Camden Clark after the hospital produced over 1,000 pages of her medical records (in response to a subpoena in unrelated federal litigation) that included adolescent in‑patient mental‑health treatment; Barber had notice of the subpoena but did not object.
- Camden Clark produced the records pursuant to West Virginia's Medical Records Act (W. Va. Code §§ 57-5-4a–4j) and the HIPAA implementing regulation; petitioner’s counsel did not review the files before Barber was confronted with them at a deposition.
- Barber filed state claims alleging violation of the West Virginia mental‑health confidentiality statute (W. Va. Code § 27-3-1) and intentional infliction of emotional distress.
- Camden Clark moved to dismiss under Rule 12(b)(6), arguing compliance with the Act and HIPAA precluded liability; the circuit court granted dismissal.
- The West Virginia Supreme Court reversed, holding that confidential mental‑health information under § 27-3-1 is not subject to disclosure under the Act absent a statutory exception or written patient consent, and that compliance with the Act/HIPAA does not bar a state cause of action for wrongful disclosure.
Issues
| Issue | Plaintiff's Argument | Defendant's Argument | Held |
|---|---|---|---|
| Whether hospital may disclose confidential mental‑health records in response to a subpoena under the Medical Records Act | § 27‑3‑1 prohibits disclosure of confidential mental‑health information absent consent or a court order; thus those records could not be disclosed via subpoena | The Act defines "records" "without restriction" and requires production; because Camden Clark followed the Act (and HIPAA), § 27‑3‑1 does not block production | Held: § 27‑3‑1 controls for confidential mental‑health information; such information is not subject to production under the Act unless an exception in § 27‑3‑1(b) applies or the patient gave written consent |
| Whether a patient’s failure to object to a subpoena equals authorization/consent to disclose mental‑health records | Silence does not satisfy § 27‑3‑2, which requires written, signed authorization for disclosure | The absence of objection after notice demonstrates the patient effectively authorized production | Held: No—written signed authorization is required; failure to object is insufficient |
| Whether compliance with the Act and HIPAA precludes state common‑law or statutory claims for wrongful disclosure | Barber: State confidentiality statute creates a private cause of action; HIPAA does not preempt state law that provides greater protection | Camden Clark: Compliance with the Act/HIPAA should shield it from liability for disclosure | Held: Compliance with the Act and HIPAA does not preclude state statutory or common‑law claims; HIPAA does not preempt state causes of action that provide greater protection |
| Whether dismissal under Rule 12(b)(6) was proper | Complaint sufficiently pleaded wrongful disclosure under § 27‑3‑1 and intentional infliction of emotional distress | Hospital argued complaint failed to state a claim because it complied with statutory/regulatory disclosure rules | Held: Dismissal was error; case reversed and remanded for further proceedings |
Key Cases Cited
- State v. Simmons, 172 W. Va. 590 (W. Va. 1983) (recognizing confidentiality of mental‑health communications under W. Va. Code § 27‑3‑1)
- Allen v. Smith, 179 W. Va. 360 (W. Va. 1988) (recognizing private tort cause of action for violation of § 27‑3‑1)
- Keplinger v. Virginia Elec. & Power Co., 208 W. Va. 11 (W. Va. 2000) (Medical Records Act procedures govern subpoenas to hospitals)
- R.K. v. St. Mary's Med. Ctr., Inc., 229 W. Va. 712 (W. Va. 2012) (state common‑law torts for wrongful disclosure of health information are not preempted by HIPAA)
- Yath v. Fairview Clinics N.P., 767 N.W.2d 34 (Minn. Ct. App. 2009) (state wrongful‑disclosure statute not preempted by HIPAA; supports view that state law can furnish additional disincentives against improper disclosure)