Utah Court of Appeals
Can Utah courts enforce HIPAA violations through unjust enrichment claims? Espinoza v. Gold Cross Services Explained
Summary
Plaintiffs challenged Gold Cross’s $30 fee for medical records sent to their attorneys, arguing it violated HIPAA’s fee limits and created unjust enrichment. The district court granted summary judgment for Gold Cross. The Court of Appeals affirmed, holding that without a private right of action under HIPAA or a state statute creating one, plaintiffs cannot enforce HIPAA provisions through state unjust enrichment claims.
Practice Areas & Topics
Analysis
Background and Facts
Dianna Espinoza and Paige Hunsaker received ambulance services from Gold Cross Services and later requested copies of their medical records. When they requested the records be sent to their attorneys rather than directly to them, Gold Cross charged each plaintiff a $30 fee. The plaintiffs paid under protest, arguing the fee violated HIPAA regulations that limit fees for individual record requests to reasonable, cost-based amounts (approximately $0.12 per page plus postage).
Key Legal Issues
The central issue was whether plaintiffs could pursue an unjust enrichment claim based on alleged HIPAA violations. Plaintiffs argued that Gold Cross was unjustly enriched by charging third-party rates when the records were requested by the patients themselves, even though sent to their attorneys. Gold Cross contended that sending records to attorneys justified the higher fee under HIPAA regulations.
Court’s Analysis and Holding
The Utah Court of Appeals affirmed summary judgment for Gold Cross, but on different grounds than the district court. Rather than determining whether HIPAA was violated, the court held that plaintiffs had no basis to enforce HIPAA provisions through state law. The court noted that HIPAA creates no private right of action, and unlike California’s Unfair Competition Law, Utah has no statute creating a private remedy for HIPAA violations. Without such authority, Utah courts cannot review alleged HIPAA violations or use them as the basis for state common law claims.
Practice Implications
This decision demonstrates the importance of identifying proper legal authority when challenging healthcare provider practices. Practitioners should not assume that federal regulatory violations can automatically be enforced through state common law theories without specific statutory authorization. The court’s analysis also highlights the significance of legislative choices—Utah’s lack of a statute comparable to California’s Unfair Competition Law left plaintiffs without recourse despite their allegations of federal regulatory violations.
Case Details
Case Name
Espinoza v. Gold Cross Services
Citation
2010 UT App 151
Court
Utah Court of Appeals
Case Number
No. 20090011-CA
Date Decided
June 10, 2010
Outcome
Affirmed
Holding
Utah courts cannot enforce HIPAA fee provisions through state unjust enrichment claims because HIPAA creates no private right of action and Utah has no equivalent statute to California’s Unfair Competition Law that would allow enforcement of federal HIPAA violations.
Standard of Review
Correctness for summary judgment
Practice Tip
When challenging healthcare provider fees based on federal regulations, ensure there is either a federal private right of action or a state statute that creates one—absent such authority, federal regulatory violations cannot be enforced through state common law claims.
Need Appellate Counsel?
Lotus Appellate Law handles appeals before the Utah Court of Appeals, Utah Supreme Court, California Court of Appeal, and the United States Court of Appeals for the Tenth Circuit.
Related Court Opinions
About these Decision Summaries
Lotus Appellate Law publishes these summaries to keep practitioners informed — not as legal advice. Each case turns on its own facts. If a decision here is relevant to your matter, we’re happy to discuss it.