Heather D. Acosta (“plaintiff’) appeals from an order dismissing her complaint against David R. Faber, II, M.D. (“Dr. Faber”) with prejudice. For the reasons stated herein, we reverse.
The issue in this case is whether the trial court properly dismissed plaintiff’s complaint as to Dr. Faber. Plaintiff argues that the complaint stated a valid claim against Dr. Faber for negligent infliction of emotional distress.
On 12 May 2005, plaintiff filed an action alleging invasion of privacy and intentional infliction of emotional distress against Robin Byrum (“Byrum”) and negligent infliction of emotional distress against Dr. Faber. Similar additional claims were made against two other defendants not associated with Psychiatric Associates of Eastern Carolina (“Psychiatric Associates”).
*565 Plaintiff was a patient of Psychiatric Associates, which is located in Ahoskie, North Carolina. She was also employed by Psychiatric Associates from September 2003 until early spring of 2004. Psychiatric Associates is owned by Dr. Faber, a citizen and resident of Alabama. Byrum was the office manager at Psychiatric Associates during the time period at issue. Plaintiff alleged that Byrum had severe personal animus towards plaintiff.
Plaintiff alleged that Dr. Faber improperly allowed Byrum to use his medical record access number. Numerous times between 31 December 2003 and 3 September 2004, Byrum used Dr. Faber’s access code to retrieve plaintiffs confidential psychiatric and other medical and healthcare records. Byrum then provided information contained in those records to third parties without plaintiff’s authorization or consent.
Plaintiff alleged in her complaint that by providing Byrum with his access code, Dr. Faber violated the rules and regulations established by University Health Systems, Roanoke Chowan Hospital, and the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Plaintiff alleged that she experienced severe emotional distress, humiliation, and anguish from the exposure of her medical records to third parties. Plaintiff alleged that Dr. Faber knew or should have known that his negligence would cause severe emotional distress.
Responding to these claims, Dr. Faber filed a motion to dismiss pursuant to Rules 12(b)(2) and (6). After a hearing, the trial court granted Dr. Faber’s motion to dismiss. Plaintiff appeals from that order.
I. Interlocutory Appeal
We must first decide whether this appeal is properly before the Court. When multiple parties are involved in a lawsuit, the trial court may make “a final judgment as to one or more but fewer than all of the claims or parties[.]” N.C. Gen. Stat. § 1A-1, Rule 54(b) (2005). Appeal of an order dismissing one of the parties to a suit is interlocutory.
Hoots v. Pryor,
Here, plaintiff’s appeal is interlocutory as only the complaint against Dr. Faber was dismissed and claims remain against the other three defendants. Since the trial court made no certification, the dismissal must affect a substantial right of plaintiff in order for this appeal to be heard. Avoiding two trials on the same factual issues affects a substantial right because separate trials might render “inconsistent verdicts on the same factual issue.”
Green v. Duke Power Co.,
II. Sufficiency of the Complaint
Plaintiff argues that the complaint should not have been dismissed because it sufficiently stated a claim for negligent infliction of emotional distress against Dr. Faber. We agree.
The appropriate standard of review for a motion to dismiss is “ ‘ “whether, as a matter of law, the allegations of the complaint . . . are sufficient to state a claim upon which relief may be granted[.]” ’ ”
Hunter v. Guardian Life Ins. Co. of Am.,
Rule 8 of the North Carolina Rules of Civil Procedure governs complaints. A complaint must contain “[a] short and plain statement of the claim sufficiently particular to give the court and the parties notice of the transactions, occurrences, or series of transactions or occurrences, intended to be proved showing that the pleader is entitled to relief[.]” N.C. Gen. Stat. § 1A-1, Rule 8(a)(1) (2005). The rule further states: “Each averment of a pleading shall be simple, concise, and direct.” N.C. Gen. Stat. § 1A-1, Rule 8(e)(1). Moreover, notice pleadings “need not contain detailed factual allegations to raise issues.”
Southern of Rocky Mount v. Woodward Specialty Sales,
Plaintiff claims that Dr. Faber caused severe emotional distress to plaintiff when he negligently provided his medical access code to Byrum. The substantive elements of negligent infliction of emotional distress are: “(1) the defendant negligently engaged in conduct, (2) it was reasonably foreseeable that such conduct would cause the plaintiff severe emotional distress . . . , and (3) the conduct did in fact cause the plaintiff severe emotional distress.”
Johnson v. Ruark Obstetrics,
When analyzing a 12(b)(6) motion, the court is to take all factual allegations as true, but should not presume legal conclusions to be true.
Miller v. Rose,
*568 Plaintiff first contends she sufficiently alleged defendant’s negligence. Plaintiff alleged that defendant negligently engaged in conduct by permitting Byrum to use his access code in violation of the rules and regulations of the University Health Systems, Roanoke Chowan Hospital, and HIPAA.
Plaintiff does not cite the exact rule or regulation of the University Health Systems, Roanoke Chowan Hospital, or HIPAA which allegedly establish Dr. Faber’s duty to maintain privacy in her confidential medical records. She merely alleges that these rules provide the standard of care. Plaintiff, however, is not required in her complaint to cite the exact rule or regulation.
See
N.C. Gen. Stat. § 1A-1, Rule 8. She only must provide Dr. Faber notice of how she plans to establish the duty that was negligently breached. To require plaintiff to describe particular provisions of the rules and regulations would defeat the purpose of simple notice pleadings, i.e., to place the opposing party on notice of all claims and defenses. Further specificity is reserved for the discovery process.
See Sutton,
Plaintiff next contends she sufficiently alleged facts to state a claim that Dr. Faber’s breach proximately caused severe emotional distress. Plaintiff’s complaint alleges that Dr. Faber knew or should have known that providing the medical access code to Byrum would cause plaintiff’s severe emotional distress. Plaintiff also states that Dr. Faber proximately caused plaintiff to suffer severe emotional distress.
“ ‘[T]he test of proximate cause is whether the risk of injury, not necessarily in the precise form in which it actually occurs, is within the reasonable foresight of the defendant.’ ”
Martishius v. Carolco Studios, Inc.,
Driver v. Burlington Aviation, Inc.,
The Court of Appeals reversed the dismissal of the negligence and negligent infliction of emotional distress claims.
Id.
at 531,
Plaintiff in this case pled the following two paragraphs in her complaint: “59. Dr. Faber knew or should have known that his negligence, as described above, was likely to cause Plaintiff severe emotional distress. 60. Dr. Faber’s negligence, as described above, proximately caused Plaintiff to suffer severe emotional distress, humiliation and mental anguish.” These allegations of foreseeability and proximate cause are strikingly similar to those made in Driver.
Additionally, plaintiff alleged the following relevant facts to support that allegation: Dr. Faber knew of the severe personal animus Byrum had for plaintiff, Dr. Faber allowed Byrum to use his medical access code, Byrum used that code to access and obtain plaintiff’s confidential medical records, and consequently, plaintiff suffered severe emotional distress, humiliation, and mental anguish. These facts are sufficient to support plaintiff’s claim of negligent infliction
*570
of emotional distress.
See also Zenobile v. McKecuen,
Plaintiff next contends she alleged sufficient facts to support a claim of severe emotional distress. Our Supreme Court discussed what is required of a complaint to establish the element of severe emotional distress in
McAllister v. Ha,
In the complaint, the “[plaintiffs alleged that defendant’s negligence caused them ‘extreme mental and emotional distress,’ specifically referring to plaintiff-wife’s fears regarding her son’s health and her resultant sleeplessness.”
Id.
at 646,
Similar to McAllister, plaintiff here claimed that defendant’s negligence caused severe emotional distress, humiliation, and mental anguish. This allegation alone, when combined with her other factual claims, placed defendant on “ ‘notice of the nature and basis of plaintiff’s claim[.]’ ” Id. (citation omitted). Therefore, plaintiff’s factual and legal allegations are sufficient .to state a claim for negligent infliction of emotional distress.
Since all the elements of negligent infliction of emotional distress were alleged and plaintiff stated relevant facts to support those elements, the complaint sufficiently stated a claim for negligent infliction of emotional distress, and the trial court erred in dismissing plaintiff’s complaint for failure to state a claim.
*571 III. Personal Jurisdiction
Plaintiff argues that Dr. Faber was subject to the personal jurisdiction of North Carolina. Since personal jurisdiction was proper, plaintiff contends, the complaint should not have been dismissed for lack of personal jurisdiction. We agree.
Dr. Faber’s motion to dismiss also alleged that defendant was not subject to personal jurisdiction in North Carolina. Dr. Faber is a citizen and resident of Alabama. He, however, is the owner of Psychiatric Associates, a company doing business in North Carolina.
For jurisdiction to be proper, North Carolina’s long arm statute must authorize jurisdiction and the defendant must be afforded his constitutional right to due process.
Better Business Forms, Inc. v. Davis,
North Carolina cannot assert personal jurisdiction over Dr. Faber unless he is afforded his due process rights. That is, Dr. Faber must have “minimum contacts” with North Carolina.
International Shoe Co. v. Washington,
IV. HIPAA violation
Plaintiff contends that no claim for an alleged HIPAA violation was made and therefore dismissal on the grounds that HIPAA does not grant an individual a private cause of action was improper. We agree.
In her complaint, plaintiff states that when Dr. Faber provided his medical access code to Byrum, Dr. Faber violated the rules and regulations established by HIPAA. This allegation does not state a cause of action under HIPAA. Rather, plaintiff cites to HIPAA as evidence of *572 the appropriate standard of care, a necessary element of negligence. Since plaintiff made no HIPAA claim, HIPAA is inapplicable beyond providing evidence of the duty of care owed by Dr. Faber with regards to the privacy of plaintiffs medical records.
V. Rule 9©
Plaintiff also contends that as the complaint does not allege medical malpractice, plaintiff was not required to comply with Rule 9Q) of the North Carolina Rules of Civil Procedure. We agree.
Rule 9(j) requires plaintiffs alleging medical malpractice to obtain, prior to filing suit, certification from an expert willing to testify that the doctor did not comply with the applicable standard of care. N.C. Gen. Stat. § 1A-1, Rule 9(j) (2005). A medical malpractice action is defined as “a civil action for damages for personal injury or death arising out of the furnishing or failure to furnish professional services in the performance of medical, dental, or other health care by a health care provider.” N.C. Gen. Stat. § 90-21.11 (2005) (emphasis added).
Estate of Waters v.
Jarman,
This Court placed claims against hospitals into two categories: (1) those that directly involve the hospital’s clinical care of the patient; and (2) those relating to the negligent management or administration of the hospital.
Id.
at 101,
Here, Dr. Faber’s alleged negligent act was providing his medical access code to Byrum. Providing an access code to access certain medical files qualifies as an administrative act, not one involving direct patient care. Therefore, Rule 9(j) is inapplicable; plaintiff did not need certification before filing suit.
VI. Conclusion
Plaintiffs complaint should not have been dismissed because plaintiff sufficiently stated a claim for negligent infliction of emotional distress against Dr. Faber, personal jurisdiction over Dr. Faber was proper, no HIPAA violation was alleged in the complaint, and Rule 9(j) is inapplicable. Accordingly, we reverse the decision of the trial court dismissing plaintiffs complaint against Dr. Faber.
Reversed.
