HIPAA Digest | Catapult Business Innovations – October 12, 2025

HIPAA—N.D. Ill.: Patient portal log-in click formed plausible basis for ECPA claim tied to HIPAA violation

A recent ruling underscores that something as simple as a patient portal login can support an ECPA claim in a HIPAA violation case, highlighting the need for robust access controls and privacy safeguards in any patient-facing or PHI-related digital infrastructure used for marketing or AI-powered services.

Read full article