CYBERSECURITYTRACKER
Permanent story citation

Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12504

As cited

Copy frozen at (site build).

breaches incidents

Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case

The Ninth Circuit Court of Appeals ruled that health plan participants have legal standing to sue for damages when their confidential health information is disclosed without authorization, departing from the risk-based standing test that other courts have applied since the TransUnion decision. This decision creates a split with other federal circuits on whether actual harm or injury-in-fact is required to pursue health data breach claims.

Why it matters: Health plan administrators and insurers now face increased litigation risk in the Ninth Circuit, as participants can sue for unauthorized disclosure of health data even without proving financial loss, making standing doctrine a key issue in data security incident response and settlement strategy.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary