Alana Hannant v. Culbertson Memorial Hospital Foundation, d/b/a Sarah D. Culbertson Memorial Hospital

Summary

The United States District Court for the Central District of Illinois ruled on Culbertson Memorial Hospital Foundation’s motion to dismiss claims arising from alleged use of third-party tracking technology on its website. The court denied leave to file a reply, allowed negligence and negligence per se claims to proceed, and held that the complaint plausibly alleged an Electronic Communications Privacy Act claim based on the alleged interception and disclosure of patient-related information in violation of HIPAA. The court also declined at this stage to apply Illinois Tort Immunity Act protections.

Holdings

1. The complaint did not establish that Culbertson was a local public entity or that it conducted public business and was tightly enmeshed with government. The Illinois Tort Immunity Act therefore could not support dismissal of the negligence and negligence-per-se claims at the pleading stage.
2. Hannant plausibly alleged that Culbertson intercepted communications for the purpose of disclosing individually identifiable health information to third parties in violation of HIPAA. The ECPA crime-tort exception therefore applied despite Culbertson's alleged ultimate motivation of financial gain.
3. The complaint plausibly alleged the interception and disclosure of communication contents under 18 U.S.C. § 2511(1)(c) and (d). Information concerning Hannant's medical-patient status, providers, treatment, medical research, and patient-portal use was more than mere record information.
4. Hannant failed to plausibly allege that Culbertson was an electronic communication service provider under 18 U.S.C. § 2511(3)(a) or the Stored Communications Act. The conclusory allegation that the website facilitated two-way communications between patients and doctors lacked factual detail showing that Culbertson provided the communication service rather than merely using or licensing a third-party service.
5. Leave to file a reply was denied because Culbertson did not identify new or unexpected issues in Hannant's response and the proposed reply largely repeated arguments already made.

Questions Presented

1. Whether the Illinois Tort Immunity Act established on the face of the complaint that Culbertson was a local public entity entitled to immunity from the negligence claims.
2. Whether Hannant plausibly alleged that Culbertson's interception of communications was undertaken for the purpose of committing an independent criminal or tortious act, such that the ECPA's crime-tort exception to the one-party-consent exception applied.
3. Whether the health-related information allegedly intercepted and disclosed constituted the contents of electronic communications under the ECPA.
4. Whether Hannant plausibly alleged that Culbertson was an electronic communication service provider subject to 18 U.S.C. § 2511(3)(a) and the Stored Communications Act.

Disposition

other