Ninth Circuit: Breach Of Confidence Confers Standing In Health Data Security Case
The Ninth Circuit ruled that health plan members whose confidential medical information was disclosed without authorization have legal standing to sue, even without proving a concrete financial or physical harm. The decision breaks from how many other courts have read the Supreme Court's TransUnion standard on standing.
Why this matters: This matters for anyone whose health data has been exposed in a breach. Most courts have been throwing out privacy cases because plaintiffs could not point to a specific, measurable injury — a high bar that lets companies off the hook after leaking sensitive medical records. The Ninth Circuit is saying the unauthorized disclosure itself is enough harm to get into court. That shifts real power to patients. It also puts pressure on other circuits and sets up a likely fight over whose standard wins.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.