In August of last year, a Colorado Federal District Court decided there is no private right of action under the privacy provisions of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Strangely, this case was not brought by an individual claiming the health care provider, a hospital, had violated the individual’s HIPAA rights. Instead, the suit was brought by the hospital against a publishing company that owns a newspaper. The suit alleged that the newspaper had published the hospital’s confidential peer-reviewed report that included negative information about a neurosurgeon on its staff. Go to entire article