2020 Ohio 6658
Ohio2020Background
- Menorah Park sued Irene Rolston in small-claims court for $463.53 in unpaid therapy bills and attached two unredacted billing statements to its complaint (dates, provider & patient names/addresses, procedure codes, general service descriptions, charges/credits/balances).
- Rolston filed an answer and a class-action counterclaim alleging breach of physician‑patient confidentiality under Biddle v. Warren Gen. Hosp.
- The municipal court granted Menorah Park’s Civ.R. 12(B)(6) motion to dismiss Rolston’s counterclaim; the Eighth District reversed.
- The Ohio Supreme Court granted review on whether HIPAA preempts Biddle and whether relying on HIPAA to evaluate disclosures would create a private right of action.
- The Court held HIPAA does not preempt a Biddle claim, recognized a qualified privilege for providers suing to collect unpaid medical bills, and defined a “minimum necessary” disclosure standard for such suits.
- Applying that standard, the Court concluded Menorah Park’s attached bills constituted only the minimum necessary information and therefore Rolston failed to state a Biddle claim; the appellate judgment was reversed and the case remanded.
Issues
| Issue | Plaintiff's Argument (Rolston) | Defendant's Argument (Menorah Park) | Held |
|---|---|---|---|
| Whether HIPAA preempts state common‑law Biddle claims | Biddle claim remains viable; HIPAA does not displace state tort protection of confidentiality | If HIPAA authorizes disclosure for payment, it preempts conflicting state-law claims | HIPAA does not preempt Biddle; state tort complements HIPAA and may be more stringent |
| Whether invoking HIPAA to define “unauthorized” disclosure would create a private right of action | Using HIPAA regs to define unauthorized disclosure does not create a private federal cause of action | Reliance on HIPAA to justify disclosure would improperly create a private enforcement mechanism | Court: referring to HIPAA standards to limit Biddle does not create a private HIPAA cause of action; federal enforcement mechanisms remain exclusive |
| Whether disclosure to collect payment is privileged and what is "minimum necessary" | Menorah Park disclosed more than necessary (billing descriptions revealed therapy types) | Provider may disclose limited info to obtain payment; attaching bills under Civ.R.10(D) satisfies minimum necessary | Created qualified privilege: providers may disclose only the minimum necessary to state a claim; attaching bills showing provider/patient names & addresses, service dates, procedure/billing codes, general category of services, and amounts charged/paid/due satisfies the standard; Menorah Park met it |
Key Cases Cited
- Biddle v. Warren Gen. Hosp., 86 Ohio St.3d 395 (1999) (recognized independent tort for unauthorized disclosure of nonpublic medical information)
- Hageman v. Southwest Gen. Health Ctr., 119 Ohio St.3d 185 (2008) (applied Biddle; attorney liability for unauthorized disclosure obtained through litigation)
- Roe v. Planned Parenthood Southwest Ohio Region, 122 Ohio St.3d 399 (2009) (discussed Biddle defenses and qualified privileges)
- English v. Gen. Elec. Co., 496 U.S. 72 (1990) (framework for federal preemption analysis)
- Acara v. Banks, 470 F.3d 569 (5th Cir. 2006) (no private right of action under HIPAA)