Acara v. Banks

Decision Date13 November 2006
Docket NumberNo. 06-30356 Summary Calendar.,06-30356 Summary Calendar.
Citation470 F.3d 569
PartiesMargaret A. ACARA, Plaintiff-Appellant, v. Bradley C. BANKS, M.D., Defendant-Appellee.
CourtU.S. Court of Appeals — Fifth Circuit

Linda G. Rodrigue, Jennifer Jones Thomas, Kean, Miller, Hawthorne, D'Armond, McCowan & Jarman, Baton Rouge, LA, for Banks.

Appeals from the United States District Court for the Eastern District of Louisiana.

Before DeMOSS, STEWART and PRADO, Circuit Judges.

PER CURIAM:

Appellant Margaret Acara ("Acara") filed suit against Appellee Dr. Bradley Banks ("Dr. Banks") in Louisiana district court for disclosing her medical information during a deposition without her consent. Acara's complaint claimed subject matter jurisdiction based entirely upon an alleged violation of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), Pub.L. No. 104-191, 110 Stat. 1936 (1996)(codified primarily in Titles 18, 26 and 42 of the United States Code). Acara later sought leave to amend her complaint to change her residency from Louisiana to New York in order to establish diversity jurisdiction. The district court held that HIPAA does not give rise to a private cause of action, and therefore no subject matter jurisdiction existed. In addition, the district court denied Acara's motion to amend her complaint to allege diversity jurisdiction after a magistrate judge determined Acara to be a resident of Louisiana. Therefore, the district court granted Dr. Bank's motion to dismiss pursuant to Rule 12(b)(1), or alternatively Rule 12(b)(6). This timely appeal followed. For the reasons stated below, we affirm.

1. Private Right of Action Under HIPAA.

Whether or not HIPAA provides for a private cause of action is a question of statutory interpretation subject to de novo review. In re ADM/Growmark River Sys., Inc., 234 F.3d 881, 886 (5th Cir. 2000). HIPAA generally provides for confidentiality of medical records. 42 U.S.C. §§ 1320d-1 to d-7. Private rights of action to enforce federal law must be created by Congress. Alexander v. Sandoval, 532 U.S. 275, 286, 121 S.Ct. 1511, 149 L.Ed.2d 517 (2001). HIPAA has no express provision creating a private cause of action, and therefore we must determine if such is implied within the statute. Banks v. Dallas Hous. Auth., 271 F.3d 605, 608 (5th Cir.2001). "The judicial task is to interpret the statute Congress has passed to determine whether it displays an intent to create not just a private right but also a private remedy. Statutory intent on this latter point is determinative." Id.1 In addition, the plaintiff has the relatively heavy burden to show Congress intended private enforcement, and must overcome the presumption that Congress did not intend to create a private cause of action. Casas v. Am. Airlines, Inc., 304 F.3d 517, 521-22 (5th Cir.2002).

HIPAA does not contain any express language conferring privacy rights upon a specific class of individuals. Instead, it focuses on regulating persons that have access to individually identifiable medical information and who conduct certain electronic health care transactions. 42 U.S.C. § 1320d-1. HIPAA provides both civil and criminal penalties for improper disclosures of medical information. 42 U.S.C. §§ 1320d-5, d-6. However, HIPAA limits enforcement of the statute to the Secretary of Health and Human Services. Id. Because HIPAA specifically delegates enforcement, there is a strong indication that Congress intended to preclude private enforcement. Alexander, 532 U.S. at 286-87, 121 S.Ct. 1511 ("The express provision of one method of enforcing [a statute] suggests Congress intended to preclude others.").

While no other circuit court has specifically addressed this issue, we are not alone in our conclusion that Congress did not intend for private enforcement of HIPAA. Every district court that has considered this issue is in agreement that the statute does not support a private right of action. See, e.g., Agee v. United States, 72 Fed.Cl. 284 (2006); Walker v. Gerald, No. 05-6649, 2006 WL 1997635 (E.D.La. June 27, 2006); Poli v. Mountain Valleys Health Ctrs., Inc., No. 2:05-2015-GEB-KJM, 2006 WL 83378 (E.D.Cal. Jan.11, 2006); Cassidy v. Nicolo, No. 03-CV-6603-CJS, 2005 WL 3334523 (W.D.N.Y. Dec.7, 2005); Johnson v. Quander, 370 F.Supp.2d 79 (D.D.C. 2005); Univ. of Colo. Hosp., 340 F.Supp.2d 1142 (D.Colo.2004); O'Donnell v. Blue Cross Blue Shield of Wyo., 173 F.Supp.2d 1176 (D.Wyo.2001); Means v. Ind. Life & Accident Ins. Co., 963 F.Supp. 1131 (M.D.Ala.1997); Wright v. Combined Ins. Co. of Am., 959 F.Supp. 356 (N.D.Miss. 1997).

Furthermore, Acara provides no authority to support her assertion that a private right of action exists under HIPAA, and her policy arguments are unpersuasive. We hold there is no private cause of action under HIPAA and therefore no federal subject matter jurisdiction over Acara's asserted claims.

2. Diversity Jurisdiction.

In this action Acara sought leave to amend her original complaint to change her residency from Louisiana to New York and thus alternatively plead diversity to satisfy subject matter jurisdiction. The question of whether or not Acara's residency had changed from Louisiana to New York was referred to a magistrate judge who later determined that Acara was a resident of Louisiana.

As long as the district court applies the correct standard of law, findings as to the state residency of the parties will be upheld unless clearly erroneous. Coury v. Prot, 85 F.3d 244, 249 (5th Cir.1996). We find no evidence that either the magistrate judge or district judge clearly erred in the determination that Acara remained a Louisiana resident. Therefore, since both the plaintiff and the defendant are residents of Louisiana, there is no diversity and this court lacks subject matter jurisdiction. The district court's judgment dismissing the complaint is AFFIRMED. Acara is free to pursue any remaining state law claims in state court.

AFFIRMED.

1. In Cort v. Ash, 422 U.S. 66, 95 S.Ct. 2080, 45 L.Ed.2d 26 (1975), the Supreme Court laid out a four factor analysis to determine when a federal statute gives rise to an implied private right of action. These factors include: (1) whether the plaintiff is one of...

To continue reading

Request your trial
354 cases
  • In Re Marcellus A. Maple
    • United States
    • U.S. Bankruptcy Court — Eastern District of Virginia
    • July 21, 2010
    ...information. 45 C.F.R. § 164.520(a)-(b) (2010). “HIPAA has no express provision creating a private cause of action.” Acara v. Banks, 470 F.3d 569, 571 (5th Cir.2006) Banks v. Dallas Hous. Auth., 271 F.3d 605, 608 (5th Cir.2001)). Rather, HIPAA tasks the Secretary of Health and Human Service......
  • Akins v. Liberty Cnty.
    • United States
    • U.S. District Court — Eastern District of Texas
    • January 9, 2014
    ...Insurance Portability and Accountability Act ("HIPAA"). HIPAA, however, does not create a private right of action. See Acara v. Banks, 470 F.3d 569, 572 (5th Cir. 2006); accord Dodd v. Jones, 623 F.3d 563, 569 (8th Cir. 2010); Crawford v. City of Tampa, No. 09-15649, 2010 WL 3766627, at *2 ......
  • McCrea v. Dist. of Columbia
    • United States
    • U.S. District Court — District of Columbia
    • March 31, 2021
    ...allegation does not state a cognizable HIPPA claim. HIPPA "generally provides for confidentiality of medical records." Acara v. Banks, 470 F.3d 569, 571 (5th Cir. 2006) (citing 42 U.S.C. §§ 1320d-1 to d-7), and McCrea points to no provision of HIPAA that precludes requests for medical infor......
  • Martinez v. Prudential Ins. Co. of Am.
    • United States
    • U.S. District Court — Southern District of Texas
    • September 27, 2021
    ...a violation of ERISA provisions." (Dkt. No. 10 at p. 28 ¶ 4.381). HIPAA does not create a private cause of action. Acara v. Banks , 470 F.3d 569, 570-72 (5th Cir. 2006). Therefore, this claim must be dismissed.v. Claim under 20 C.F.R. § 702.217(b). Plaintiff alleges a violation of 20 C.F.R.......
  • Request a trial to view additional results
2 books & journal articles
  • Littler on Data Protection & Release of Personal Information HIPAA & Related Laws § 1.1 -The Health Insurance Portability and Accountability Act Privacy Rule
    • United States
    • Littler Mendelson US National Library Littler on Data Protection & Release of Personal Information: HIPAA & Related Laws
    • Invalid date
    ...§ 160.404(b)(2)(iv).[93] U.S. v. Michel, No. 07-cr-889-JFB (E.D.N.Y., Aug. 15, 2012) (jury verdict).[94] See, e.g., Acara v. Banks, 470 F. 3d 569, 570-72 (5th Cir. 2006) (and cases cited therein); Young v. Carran, 289 S.W.3d 586 (Ky. Ct. App. 2008).[95] See, e.g., Kusgen v. Lake Reg’l Healt......
  • PRIVATE RIGHTS OF ACTION IN PRIVACY LAW.
    • United States
    • William and Mary Law Review Vol. 63 No. 5, April 2022
    • April 1, 2022
    ...563, 569 (8th Cir. 2010). (39.) Stacey A. Tovino, A Timely Right to Privacy, 104 IOWA L. REV. 1361, 1374-90 (2019). (40.) Acara v. Banks, 470 F.3d 569, 571-72 (5th Cir. 2006) ("Every district court that has considered this issue is in agreement that the statute does not support a private ri......

VLEX uses login cookies to provide you with a better browsing experience. If you click on 'Accept' or continue browsing this site we consider that you accept our cookie policy. ACCEPT