Cook County Uses HIPAA To Further Limit Discovery And Use Of Litigants’ Medical Records

February 2, 2022 / CM Reports / Writing and Speaking

by Kathleen M. Klein

On November 5, 2021, Cook County courts amended the standard HIPAA order used in cases throughout its divisions. The order is known as the HIPAA Qualified Protective Order (“QPO”), and it governs litigants’ ability to get an injured plaintiff’s medical records from treating physicians. Counsel for plaintiffs and defendants have long disagreed on the proper scope of the QPO, with plaintiffs arguing to limit record disclosure, and defendants arguing to allow wider discovery. The amendment to the QPO was inspired by the Illinois Supreme Court’s decision in Haage v. Zavala, in which the Illinois Supreme Court ruled that a proper QPO must require records to be destroyed or returned at the close of a case.

The Cook County amendments to the QPO, however, arguably went beyond the scope of the Haage holding. The new QPO, as it exists now, includes a bar on “any and all” records subpoenas, substantively limiting requests to a 5-year period prior to the incident, and to the ‘part of the body’ at issue. The QPO imposes other requirements on defendants that will increase the logistical burden and cost of records subpoenas, including requiring the requestor to provide copies to all other parties within 7 days of receipt. It is unclear whether the requesting defendant will bear the entire cost of obtaining records alone, or whether cost-sharing with other parties—who now get their records from the requesting defendant—will be permitted. 

The order requires return or destruction of all records within 60 days of the close of the case. This prohibits parties, counsel, and the parties’ insurers from using PHI for any purpose other than the litigation in which the order was entered. This poses a significant challenge for insurers who routinely include Protected Health Information, records, or bills in their permanent files or statistical reporting. The insurer in Haage raised similar issues, which the Court found unconvincing, noting in particular that an insurer could place in its file a copy of the QPO requiring record destruction, to justify the absence of medical records or bills from its file. The order further requires, at the close of the case, that affidavits be provided certifying that all records were returned or destroyed within 60 days. Thus, counsel will be required to attest to destruction of records by its insurer and all its retained experts.

There are a wide variety of potential implications of the QPO that have yet to be explored. For example, are treating physician deponents permitted to answer questions at deposition about treatment provided more than five years prior to the care at issue? Does the court have the ability or authority to waive or expand the time frame? Are there “good cause” exceptions for inability to certify destruction, for example, a physician who ceases to practice and can no longer be located? What are the implications for technology within attorney or insurer offices, including systemwide backups of files containing medical records?  There has been significant pushback on the order from portions of the legal community, and we expect the court to amend the new HIPAA order in the coming months. It is unlikely the court will completely drop the time frame limitation or the destruction requirement, but it is yet to be determined what alterations may mean for parties’ ability to obtain records about a plaintiff and their medical conditions. In the meantime, we expect motion practice and disagreements between plaintiff and defense attorneys as these new requirements are put into practice. Counsel should abide by the notice deadlines in the new order, evaluate individual case facts for any necessary case-by-case requests for enlargement of the scope of subpoenas, and preserve objections to these limitations for further review by the courts. As each case presents unique challenges, so too the application of the new QPO will vary from case to case, and the courts will have to address these issues on the fly.

  • Chicago

    Illinois 60603

    10 South LaSalle Street

    Chicago, Illinois 60603

    T: 312.855.1010 TF: 800.826.3505 F: 312.606.7777 Office Managing Partner: Dennis D. Fitzpatrick

  • New York

    New York 10005

    28 Liberty Street 39th Floor

    New York, New York 10005

    T: 212.805.3900 TF: 800.826.3505 F: 212.805.3939 Office Managing Partner: Carl M. Perri

  • Mission Viejo

    California 92691

    27285 Las Ramblas

    Suite 200

    Mission Viejo, California 92691

    T: 949.260.3100 TF: 800.826.3505 F: 949.260.3190 Office Managing Partner: Ian R. Feldman

  • Florham Park

    New Jersey 07932

    100 Campus Drive

    Florham Park, New Jersey 07932

    T: 973.410.4130 TF: 800.826.3505 F: 973.410.4169 Office Managing Partner: Carl M. Perri

  • Michigan City

    Indiana 46360

    200 Commerce Square

    Michigan City, Indiana 46360

    T: 219.262.6106 TF: 800.826.3505 F: 312.606.7777 Office Managing Partners: Paige M. Neel, Kimbley A. Kearney

  • Appleton

    Wisconsin 54914

    4650 W. Spencer Street

    Appleton, Wisconsin 54914

    T: 920.560.4658 TF: 800.826.3505 F: 920.968.4650 Office Managing Partner:

  • Stamford

    Connecticut 06902

    68 Southfield Avenue

    2 Stamford Landing Suite 100

    Stamford, Connecticut 06902

    T: 203.921.0303 TF: 800.826.3505 F: 212.805.3939 Office Managing Partner: Matthew J. Van Dusen

  • Tampa

    Florida 33609

    4830 West Kennedy Boulevard, One Urban Center

    Suite 600

    Tampa, Florida 33609

    T: 813.509.2578 TF: 800.826.3505 F: 312.606.7777 Office Managing Partner: Dennis D. Fitzpatrick

  • San Francisco

    California 94111

    100 Pine Street

    Suite 1250

    San Francisco, California 94111

    T: 415.287.2744 TF: 800.826.3505 F: 949.260.3190 Office Managing Partner: Ian R. Feldman

  • Houston

    Texas 77019

    2929 Allen Parkway

    American General Center, Suite 200

    Houston, Texas 77019

    T: 346.229.4612 TF: 800.826.3505 F: 312.606.7777 Office Managing Partner: Ramy P. Elmasri

  • Dallas

    Texas 75201

    325 N. Saint Paul Street

    Suite 3100

    Dallas, Texas 75201

    T: 469.942.8635 TF: 800.826.3505 F: 312.606.7777 Office Managing Partner: Ramy P. Elmasri

  • Boca Raton

    Florida 33434

    7777 Glades Road

    Suite 405

    Boca Raton, Florida 33434

    T: 561.765.5305 TF: 800.826.3505 F: 312.606.7777 Office Managing Partner: Dennis D. Fitzpatrick