Allen v. WrightAllen v. Wright
Lead Opinion
Ernestine Wright filed a medical malpractice action against Dr. Thomas Allen and others (Appellants). In ostensible compliance with
Appellants applied for certiorari to review the decision of the Court of Appeals. Because the preemption question was an issue of first impression and certiorari had not been sought in the Northlake Medical Center case, we granted Appellants’ petition.
1. Subsection (a) of
[i]n any action for damages alleging medical malpractice..., contemporaneously with the filing of the complaint, the plaintiff shall be required to file a medical authorization form. Failure to provide this authorization shall subject the complaint to dismissal.
Subsection (b) of the statute specifies that
[t]he authorization shall provide that the attorney representing the defendant is authorized to obtain and disclose protected health information contained in medical records to facilitate the investigation, evaluation, and defense of the claims and allegations set forth in the complaint which pertain to the plaintiff or, where applicable, the plaintiffs decedent whose treatment is at issue in the complaint. This authorization includes the defendant’s attorney’s right to discuss the care and treatment of the plaintiff or, where applicable, the plaintiffs decedent with all of the plaintiffs or decedent’s treating physicians.
Subsection (c) states that
[t]he authorization shall provide for the release of all protected health information except information that is considered privileged and shall authorize the release of such information by any physician or health care facility by which health carerecords of the plaintiff or the plaintiff s decedent would be maintained.
The intent of HIPAA is “to ensure the integrity and confidentiality of patients’ information and to protect against unauthorized uses or disclosures of the information.” [Cit.] The rules promulgating the standards set forth in HIPAA, which govern the disclosure of “protected health information” by health care providers, are collectively known as “the Privacy Rule.” [Cit.] HIPAA expressly preempts any provision of State law that is contrary to the provisions of HIPAA. [Cits.]
Northlake Medical Center v. Queen, supra at 511-512 (2). The provisions of
As was recognized by the Court of Appeals, in order to comply with HIPAA, a patient’s authorization to disclose protected health information must contain certain elements, one of which is notice of the right to revoke the authorization. Northlake Medical Center v. Queen, supra at 512-513 (2). By its terms,
Therefore, we conclude that
This Court may construe statutes to avoid absurd results .... [Cit.] However, under our system of separation of powers this Court does not have the authority to rewrite statutes. “(T)he doctrine of separation of powers is an immutable constitutional principle which must be strictly enforced. Under that doctrine, statutory construction belongs to the courts, legislation to the legislature. We can not add a line to the law.” [Cit.]
State v. Fielden,
HIPAA and the related provisions established in the Code of Federal Regulations expressly supercede any contrary provisions of [S]tate law except as provided in42 U.S.C. § 1320d-7 (a) (2) . Under the relevant exception, HIPAA and its standards do not preempt state law if the state law relates to the privacy of individually identifiable health information and is “more stringent” than HIPAA’s requirements. [Cits.]
Law v. Zuckerman, 307 FSupp.2d 705, 708-709 (A) (D. Md. 2004). “ ‘[M]ore stringent’... mean[s] laws that afford patients more control over their medical records.” (Emphasis in original.) Law v. Zuckerman, supra at 709 (A). Because
2. In addition to the statute’s failure to provide for notice of the right of revocation, the Court of Appeals in Northlake Medical Center v. Queen, supra at 513 (2), found “that the authorization set forth in
3. The dissent cites Buice u. Dixon,
On pp. 16-17, the dissent states:
[T]he mere absence of a requirement inOCGA § 9-11-9.2 that the authorization contain a statement of the right to revoke, for example, does not render the statute inconsistent with HIPAA, as an authorization could be drafted that includes both the elements required under the state law and also a statement explaining the plaintiffs right to revoke. Likewise, the failure of the state law to require a “specific and meaningful description” of the information to be released does not preclude the inclusion of such description as required by HIPAA, and the failure to require an explicit expiration date or event does not preclude the inclusion of such.
However, this observation fails to take into account that “Georgia law provides that the express mention of one thing in an Act or statute implies the exclusion of all other things. [Cit.]” Abdulkadir v. State,
Pursuant to the principle of statutory construction, “Exprés - sum facit cessare taciturn” (if some things are expressly mentioned, the inference is stronger that those omitted were intended to be excluded) and its companion, the venerable principle, “Expressio unius est exclusio alterius” (“The express mention of one thing implies the exclusion of another”), the list of actions in [a statute] is presumed to exclude actions not specifically listed ([cit.]), and the omission of [additional actions] from [the statute] is regarded by the courts as deliberate. [Cits.]
Alexander Properties Group v. Doe,
The dissent is correct that the established rules of statutory construction require the courts to interpret a statute as valid whenever possible. Banks v. Ga. Power Co.,
Judgment affirmed.
Concurrence Opinion
concurring in part and dissenting in part.
While I agree with the majority that subsection (c) of
Under HIPAA’s preemption provisions, state law may be preempted by the Privacy Rule only if the relevant HIPAA standard is, in the first instance, “contrary to” the state law in question.
Under the reasoning of the majority, which affirms the Court of Appeals’ reliance below on its prior holding in Northlake Medical Center v. Queen,
The Court of Appeals held, and the majority herein affirms, that preemption is required because
Contrary to the Court of Appeals’ position in Northlake Medical Center and the majority’s opinion herein, construing
The majority invokes the principle of “expressio unius est exclusio alterius” to argue that, because
This is particularly true where, as here, there is evidence to support the presumption that the legislature enacted the statute at issue with knowledge of existing law and with the intent that it would coexist in harmony with, rather than be preempted by, such law. Specifically, as correctly recognized in the dissent in Northlake Medical Center,
whenOCGA § 9-11-9.2 was enacted[,] existing Georgia law provided that, by filing a medical malpractice complaint, the plaintiff waived the right to privacy in the plaintiff s medical records — without the necessity of waiver by a written medical authorization — to the extent the complaint placed the plaintiffs medical care and treatment... at issue in the civil action.
Northlake Medical Center,
It follows that, when the General Assembly enactedOCGA § 9-11-9.2 , there was no necessity under existing Georgia law to require that the plaintiff file a written medical authorization with the complaint to establish a waiver of the plaintiffs privacy rights in relevant medical records. There was such a necessity, however, under existing federal law in HIPAA.
Northlake Medical Center,
Notwithstanding the fact that I believe it possible to comply with both
Havingbeen found “contrary to” HIPAA,
It should be noted that preserving the validity of
[i]n the event any section, subsection, sentence, clause or phrase of this Act shall be declared or adjudged invalid or unconstitutional, such adjudication shall in no manner affect the other sections, subsections, sentences, clauses, or phrases of this Act, which shall remain of full force and effect as if the [provision] adjudged invalid or unconstitutional were not originally a part hereof.
Ga. L. 2005, p. 1, § 14. See also
Accordingly, I would affirm the decision of the Court of Appeals only insofar as it holds subsection (c) of
Notes
45 CFR Parts 160 & 164. Throughout this opinion the terms “HIPAA Privacy Rule,” “Privacy Rule,” and “HIPAA” are used interchangeably.
Such a statement would have to include an explanation that revocation of the authorization would subject the complaint to dismissal. See
Though the Court of Appeals also held that HIPAA’s “specific and meaningful description” requirement was violated by virtue of the breadth of the information
For example, the authorization could be drafted to expire at the conclusion of the litigation pursuant to which the authorization was filed.
As none of the cases the majority cites in support of its position involved the construction of a statute vis-á-vis another potentially preemptive law, they do not necessarily compel the result the majority advances. See Alexander Properties Group v. Doe,
To date, the Legislature has not amended
The legislative history of
The Privacy Rule prescribes three other exceptions to preemption, none of which are applicable here. See
In its amicus brief, the Georgia Trial Lawyers Association (“GTLA”) argues that