No Harm, No Foul: Court of Appeal lets UCLA off the hook for $16 million in lost medical data case


A computer hard drive containing private medical information for 16,000 patients at UCLA was stolen. One of the patients filed a class action lawsuit seeking $1,000 per patient ($16 million total) in statutory damages against the UC Regents. Although the plaintiff pled that the UC system negligent stored the patient data the plaintiff did not plead that any third party had actually viewed the confidential data. The question posed to the trial court and again on appeal was whether a claim for statutory damages could proceed absent pleading and proof of actual disclosure. The trial court ruled for the plaintiff and overruled the UC Regents’ demurrer.

The Court of Appeal reversed and granted a writ petition by the UC Regents today. In an opinion authored by Presiding Justice Dennis Perluss Division Seven of the Second District Court of Appeal, ruled that an action for statutory damages under California’s Confidentiality of Medical Information Act requires proof of actual disclosure of the data to a third party. Mere negligent storage of the information alone is insufficient. You can read the decision in Regents of University of California v. Superior Court (Platter) (Oct. 15, 2013 B249148) here.

Given that the thief in this case and similar cases is not likely ever to admit to viewing the data, it is difficult to imagine a scenario where stolen data will result in statutory damages in the future unless the thief is caught and confesses.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Broedlow Lewis LLP | Attorney Advertising

Written by:


Broedlow Lewis LLP on:

JD Supra Readers' Choice 2016 Awards
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.

Already signed up? Log in here

*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.