| ▲ | tptacek an hour ago | |||||||
Is there a fact pattern where Lim could have bank-shot criminal liability despite not herself being a covered entity? Probably? She could have misrepresented who she was and obtained the records through fraud, for instance. Again, my thing here is, if you're going to put those kinds of accusations on the table, and you're a district attorney, you'd better come correct. The facts presented in the document the DA's office shared are not sufficient to allege wrongdoing by Lim. | ||||||||
| ▲ | phonon 44 minutes ago | parent [-] | |||||||
If you induce someone to violate HIPAA who is covered by it (like say a nurse at a hospital), you can be criminally liable. There is no carve-out for journalists. BOTH the person who gave the record and the person who induced them to give it could be liable (not in the same way, possibly). In any case, you seemed to think there was a bright line rule of some sort, that "At one point it accuses Lim of "violating HIPAA", which is not a thing† (HIPAA constrains covered entities, not reporters)." when in fact you can be criminally liable for inducement/conspiracy etc if you induce someone who is covered to give you those records, under https://www.law.cornell.edu/uscode/text/42/1320d-6 Here is another similar case of a non-medical person violating HIPAA. https://www.justice.gov/usao-wdtn/pr/memphis-man-sentenced-c... Take the L :-) | ||||||||
| ||||||||