--- title: "Navigating Turbulent Legal Waters: HIPAA Responsibilities for Lawyers Handling Private Health Information in Litigation" description: Attorneys who handle the sensitive private health information (PHI) of their clients are responsible for the confidentiality and safekeeping of their client’s medical records. image: https://www.purview.net/hubfs/HIPAACompliance2.jpg --- [Patient Log In](https://www.purview.net/sign_in) ![](https://www.purview.net/hs-fs/hubfs/search-icon.png?width=40&height=42&name=search-icon.png) [![Purview® Logo](https://www.purview.net/hs-fs/hubfs/image1.png?width=1600&height=212&name=image1.png "Purview® Logo")](https://www.purview.net) Open main menu Close main menu - SOLUTIONS Open the submenu - [Expert View](https://www.purview.net/expert-view) - [Purview Image](https://www.purview.net/image) - CLIENTS Open the submenu - [Hospitals](https://www.purview.net/hospitals) - [Physicians](https://www.purview.net/physicians) - [Radiologists](https://www.purview.net/radiologists) - [Veterinary Specialists](https://www.purview.net/veterinary-specialists) - [Legal Services](https://www.purview.net/legal-services) - LEARN Open the submenu - [Blog](https://www.purview.net/learn-blog) - [Webinars](https://www.purview.net/webinars) - [Case Studies](https://www.purview.net/case-studies) - [White Papers](https://www.purview.net/whitepapers) - [User Stories](https://www.purview.net/user-stories) - [FAQ](https://www.purview.net/faqs) - [News](https://www.purview.net/news) - [ABOUT](https://www.purview.net/about) - [Talk to Us](https://www.purview.net/contact-us) # [Blog](https://www.purview.net/-temporary-slug-b02e404d-d4fc-45ef-892c-6e2fb3eb27cb?hs_preview=wZjuNnwR-68372816499) - [Blog](https://www.purview.net/learn-blog) - [Webinars](https://www.purview.net/webinars) - [Case Studies](https://www.purview.net/case-studies) - [White Papers](https://www.purview.net/whitepapers) - [User Stories](https://www.purview.net/user-stories) - [FAQ](https://www.purview.net/faqs) - [News](https://www.purview.net/news) [Compliance/Legislation](https://www.purview.net/blog/topic/compliance-legislation) [Litigation](https://www.purview.net/blog/topic/litigation) [HIPAA](https://www.purview.net/blog/topic/hipaa) # Navigating Turbulent Legal Waters: HIPAA Responsibilities for Lawyers Handling Private Health Information in Litigation ![Les Trachtman, EE, JD, MBA](https://www.purview.net/hs-fs/hubfs/Les%20Trachtman%20Circle%20BW.png?width=45&name=Les%20Trachtman%20Circle%20BW.png) **Written By:** Les Trachtman, EE, JD, MBA | **Published On:** January 3, 2024  Printer Friendly [Share this blog post on Twitter](https://twitter.com/intent/tweet?text=I+found+this+interesting+blog+post&url=https://www.purview.net/blog/2024-hipaa-and-litigation) [Share this blog post on Facebook](http://www.facebook.com/share.php?u=https://www.purview.net/blog/2024-hipaa-and-litigation) [Share this blog post on LinkedIn](http://www.linkedin.com/shareArticle?mini=true&url=https://www.purview.net/blog/2024-hipaa-and-litigation) ![](https://www.purview.net/hubfs/HIPAACompliance2.jpg) Attorneys who handle the sensitive private health information (PHI) of their clients are responsible for the confidentiality and safekeeping of their client’s medical records. For lawyers engaged in litigation involving healthcare matters, understanding and adhering to requirements of the Health Insurance Portability and Accountability Act (HIPAA)[\[1\]](https://www.purview.net/blog/2024-hipaa-and-litigation#_ftn1) is not just a regulatory requirement but a crucial aspect of protecting the privacy and confidentiality of individuals' health data as well as safeguarding of the firm’s reputation. Enacted in 1996, HIPAA was designed to safeguard individuals' sensitive health information while promoting better access and portability of patients’ medical records. Lawyers handling their litigant’s PHI should generally be well-versed in these regulations but specifically the Privacy Rule, Security Rule, and Breach Notification Rule of the Act. Under HIPAA, all PHI is confidential and is not available to anyone other than the patient or his or her authorized representative. Others who require access to a patient’s PHI, including lawyers, must obtain specific written authorization from the patient or his or her representative outlining the purpose, scope, and entities involved in the disclosure before accessing, using, or disclosing their PHI for litigation purposes. Handling PHI is a sometimes confusing and sensitive matter. Here are some best practices for any attorney or firm handling PHI under HIPAA. 1. **Limited Use and Disclosure:** Lawyers should limit the use and disclosure of PHI to what is minimally necessary for litigation purposes. This principle ensures that only essential information is accessed only by people who require it, reducing the risk of inadvertent disclosure. 2. **Secure Transmission and Storage:** Transmission and storage of PHI must be secure. Attaching an image to an email, for example, is typically not secure.       Mailing a CD through the standard mail or even a courier could be a breach of HIPAA if it ends up in the wrong hands. Storing medical images on your administrator’s computer, where others may have access, may be risky. Lawyers must employ encryption and other safeguards when sending or storing health information both in analog and electronic format. 3. **Employee Training and Awareness:** It’s not sufficient to just understand and be compliant with the Act. Law firms handling PHI must invest in regular HIPAA training for their staff. This includes educating legal professionals and support staff about the importance of safeguarding PHI and the potential legal consequences of non-compliance. There are services and online training programs available for this purpose that will check the box on this requirement. 4. **Business Associate Agreements:** When lawyers engage third-party vendors, experts, consultants and license software that touches PHI, a HIPAA-compliant business associate agreement (BAA) is essential. This legal document outlines the responsibilities and safeguards to ensure the protection of PHI. You are responsible for ensuring the software you use to handle PHI is HIPAA compliant (not all case management software is) and that the vendor signs a BAA. 5. **Individual Rights:** Lawyers, just like others who handle PHI, must respect individuals' rights regarding their health information. This includes providing access to their PHI upon a patient’s request, allowing them to request corrections, and enabling them to control and direct the disclosure of their information. 6. **Breach Notification:** In the event of a security breach involving PHI, lawyers must follow HIPAA's breach notification requirements. This involves notifying affected individuals, the Department of Health and Human Services (HHS), and, in some cases, the media. Consequences of Non-Compliance: Failure to adhere to HIPAA regulations can result in material civil and criminal penalties, as well as impact to the law firm's reputation. Individuals affected by unauthorized disclosures may pursue legal remedies against the responsible parties. The fines for a lawyer or any entity breaching the Health Insurance Portability and Accountability Act (HIPAA) can vary depending on the severity of the violation; from several hundred dollars for an inadvertent act to tens of thousands for willful neglect. By understanding and implementing the safeguards outlined by HIPAA, attorneys can ensure the protection of individuals' private health information while effectively advocating for their clients in healthcare-related legal matters. [\[1\]](https://www.purview.net/blog/2024-hipaa-and-litigation#_ftnref1) Health Insurance Portability and Accountability Act of 1996. 42 USC 201 ---   For more about handling medical records during litigation, watch the full webinar: [The Fast and Secure Way to Share Medical Records to Win Your Case or](https://www.purview.net/202312-malpractice)[reach out to us](mailto:sales@purview.net) with your questions *Les Trachtman discusses the handling of PHI*   Related articles [![](https://www.purview.net/hs-fs/hubfs/aalnc%20stock%20blog.jpg?height=200&name=aalnc%20stock%20blog.jpg) Litigation Reflections from the American Association of Legal Nurse Consultants 2026 Annual Conference in Orlando Les Trachtman, EE, JD, MBA Read Now](https://www.purview.net/blog/reflections-from-aalnc-2026-forum) [![](https://www.purview.net/hs-fs/hubfs/meeting-hospital-and-team-of-doctors-with-documen-2026-01-09-11-13-44-utc%20copy.jpg?height=200&name=meeting-hospital-and-team-of-doctors-with-documen-2026-01-09-11-13-44-utc%20copy.jpg) Litigation How Legal Nurse Consultants Transform Cases Les Trachtman, EE, JD, MBA Read Now](https://www.purview.net/blog/legal-nurse-consultants) [![](https://www.purview.net/hs-fs/hubfs/Data%20Residency%20Image%20sm%20icon.jpg?height=200&name=Data%20Residency%20Image%20sm%20icon.jpg) Second Opinions | Compliance/Legislation Cross-Border Telehealth: Why Data Residency Can Make or Break Remote Access Les Trachtman, EE, JD, MBA Read Now](https://www.purview.net/blog/data-residency) ![image1](https://www.purview.net/hs-fs/hubfs/image1.png?width=300&height=40&name=image1.png) #### About Purview [About Us](https://www.purview.net/about) [News](https://www.purview.net/news) #### Solutions [Expert View™](https://www.purview.net/expertview) [Expert View™ Demo](https://www.purview.net/scale-with-second-opinions-demonstration) [Purview Image™](https://www.purview.net/image) [Purview Image™ Demo](https://www.purview.net/image#Five-Min-Demo) #### Resources [Blog](https://www.purview.net/blog) [Events](https://www.purview.net/webinars) [Customer Stories](https://www.purview.net/user-stories) #### Support [Contact Support](https://www.purview.net/contact-us) [Contact Us](https://www.purview.net/contact-us) [Sales](https://www.purview.net/contact-us) [![facebook-purview](https://www.purview.net/hs-fs/hubfs/facebook-purview.png?width=30&height=30&name=facebook-purview.png)](https://www.facebook.com/PurviewImages) [![linkedin-purview](https://www.purview.net/hs-fs/hubfs/linkedin-purview.png?width=26&height=25&name=linkedin-purview.png)](https://www.linkedin.com/company/purview) © 2026 PURVIEW All Rights Reserved [Privacy Policies](https://www.purview.net/privacypolicy) [Terms of Service](https://www.purview.net/hubfs/Purview%20Terms%20of%20Service.pdf) ![](https://px.ads.linkedin.com/collect/?pid=1516546&fmt=gif)   ### Title Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. WATCH NOW | [ALL NEWS]({url={type=EXTERNAL,%20content_id=null,%20href=,%20href_with_scheme=},%20open_in_new_tab=false,%20no_follow=false,%20sponsored=false,%20user_generated_content=false,%20rel=}) ![small-blog-image](https://www.purview.net/hs-fs/hubfs/small-blog-image.jpg?width=200&height=143&name=small-blog-image.jpg) ```json { "@context" : "https://schema.org", "@type" : "VideoObject", "caption" : { "@type" : "MediaObject", "contentUrl" : "https://www.purview.net/media-transcripts/151903931785/en.vtt", "inLanguage" : "en", "name" : "en Captions" }, "contentUrl" : "https://462304.fs1.hubspotusercontent-na1.net/hubfs/462304/2023-12%20Litigation%20Webinar%20Clip2-1.mp4", "dateModified" : "2026-04-15T18:59:26.282Z", "duration" : "PT54.281S", "height" : 720, "name" : "2023-12 Litigation Webinar Clip2-1", "thumbnailUrl" : "https://api-na1.hubspot.com/filemanager/api/v3/files/thumbnail-redirect/151903931785?portalId=462304&size=medium", "uploadDate" : "2024-01-03T20:49:47.941Z", "width" : 1280 } ```