In the Matter of Miguel M.

Respondent, a designee of the New York City Department of Health and Mental Hygiene, petitioned for an order under Mental Health Hygiene Law 9.60 requiring assisted outpatient treatment ("AOT") for Miguel M. At issue was whether the Privacy Rule adopted by the federal government pursuant to the Health Insurance Portability and Accountability Act ("HIPAA"), 42 U.S.C. 1320d-2, prohibited respondent from disclosing, at the petition hearing, records from two hospitals related to three occasions on which Miguel was hospitalized. The court held that the Privacy Rule prohibited the disclosure of a patient's medical records to a state agency that requested them for use in a proceeding to compel the patient to accept mental health treatment where the patient had neither authorized the disclosure nor received notice of the agency's request for the records. Accordingly, the medical records at issue were not admissible in a proceeding to compel AOT.