In a recent ruling, the Ohio Court of Appeals addressed the case of Sha-Ann Arndts versus the University of Cincinnati Medical Center (UC), affirming some parts of the trial court's decision while reversing others. This case, filed under appeal number C-250687, primarily concerns allegations of medical malpractice and violations of privacy laws, specifically the Health Insurance Portability and Accountability Act (HIPAA). The outcome of this case may have significant implications for how medical institutions handle patient information.
Sha-Ann Arndts, representing herself, initially filed a lawsuit against UC on June 30, 2025. Her claims included defamation, fraud, tampering with records, fraudulent billing, and failure to report abuse. Arndts contended that the alleged fraud began after her surgery at UC in July 2021, but she did not discover the supposed misconduct until December 2024. UC responded by filing a motion to dismiss Arndts's complaint, arguing that her claims were barred by the four-year statute of limitations for medical claims and by the principle of res judicata, as she had previously sued UC over similar issues.
In September 2025, before the trial court ruled on UC's motion, Arndts submitted an amended complaint that removed references to her July 2021 surgery but retained the same core allegations. This amended complaint added a claim related to HIPAA violations. UC again moved to dismiss the complaint, and the trial court ultimately granted this motion, stating that Arndts could not prove any set of facts that would entitle her to relief. Arndts subsequently appealed the decision.
The Ohio Court of Appeals, led by Presiding Judge Kinsley, reviewed the case. The court agreed with the trial court's dismissal of Arndts's claims for defamation, fraud, tampering with records, fraudulent billing, and failure to report abuse, stating that these claims did not meet the legal standards necessary to proceed. The court noted, "Arndts was required to plead special damages, which she failed to do. The trial court therefore correctly dismissed Arndts’s defamation claim." Furthermore, the court found that her fraud-related claims lacked the necessary details to satisfy Ohio's heightened pleading standards.
However, the court also found merit in Arndts's claim regarding the unauthorized disclosure of her medical information. The court held that while HIPAA does not provide a private cause of action, Ohio law recognizes a tort for the unauthorized disclosure of medical information. The court stated, "Although sparse, these allegations are sufficient to state a Biddle claim." This means that Arndts's allegations about UC sharing her medical information without consent could proceed to further legal consideration.
The ruling has significant implications for both Arndts and UC. For Arndts, the court's decision allows her to pursue her claim regarding the unauthorized disclosure of her medical records, which could lead to further legal action against UC. For UC, the ruling reinforces the importance of maintaining patient confidentiality and could impact how medical institutions manage patient information in the future.
This case also highlights the challenges individuals face when navigating the legal system without legal representation. Arndts's struggle to articulate her claims clearly and meet the necessary legal standards illustrates the complexities involved in medical malpractice and privacy cases.
As for the next steps, the Ohio Court of Appeals has remanded the case back to the trial court for further proceedings regarding Arndts's claim of unauthorized disclosure of medical records. The court's decision leaves open the possibility for further legal action and clarification on the standards for handling patient information in medical settings.
Details were not available in the court filing regarding whether UC plans to appeal the ruling or if there are related cases pending. However, the outcome of this case may set a precedent for similar claims involving the unauthorized disclosure of medical information in Ohio.