Paul v. Providence Health System-Oregon

by
The issue in this case was whether a healthcare provider could be held liable for damages when the provider's negligence permitted the theft of its patients' personal information, though the information was never used or viewed by the thief or any other person. Plaintiffs Laurie Paul and Russell Gibson (individually and on behalf of all similarly-situated individuals) claimed economic and noneconomic damages for financial injury and emotional distress that they allegedly suffered when, through Defendant Providence Health System-Oregon's alleged negligence, computer disks and tapes containing personal information from an estimated 365,000 patients (including Plaintiffs') were stolen from the car of one of Defendant’s employees. The trial court and Court of Appeals held that Plaintiffs had failed to state claims for negligence or for violation of the Unlawful Trade Practices Act (UTPA). Upon review, the Supreme Court concluded that, in the absence of allegations that the stolen information was used in any way or even was viewed by a third party, Plaintiffs did not suffer an injury that would provide a basis for a negligence claim or an action under the UTPA. View "Paul v. Providence Health System-Oregon" on Justia Law