UNITED STATES DISTRICT COURT 

FOR THE DISTRICT OF COLUMBIA 

HOPE LEE-THOMAS, : 

 : 

 Plaintiff, : Civil Action No.: 18-591 (RC) 

 : 

 v. : Re Document No.: 3 

 : 

LAB CORP, : 

 : 

 Defendant. : 

MEMORANDUM OPINION 

GRANTING DEFENDANT LABCORP’S MOTION TO DISMISS

I. INTRODUCTION 

Plaintiff Hope Lee-Thomas brings suit against Defendant Laboratory Corporation of 

America (“LabCorp”) for failing to protect her privacy and confidentiality in violation of the 

Health Insurance Portability and Accountability Act (“HIPAA”). LabCorp moved to dismiss on 

the ground that Ms. Lee-Thomas’s complaint failed to state a claim upon which relief can be 

granted because HIPAA does not provide individuals with a private cause of action. For the 

reasons set forth below, the Court grants LabCorp’s motion and dismisses Ms. Lee-Thomas’s 

case. 

II. FACTUAL BACKGROUND1

Hope Lee-Thomas was a patient at Providence Hospital in Washington, D.C. on June 15, 

2017, where she received treatment from Defendant, LabCorp. Compl. at 3, ECF No. 1-1.2

 Ms. 

Lee-Thomas was instructed by a LabCorp technician to submit her medical information using a 

 1

 At the motion to dismiss stage, the Court accepts the plaintiff’s factual allegations as 

true. See, e.g., United States v. Philip Morris, Inc., 116 F. Supp. 2d 131, 135 (D.D.C. 2000). 

2

 Unless indicated otherwise, all relevant documents are filed under ECF No. 1-1. The 

citations are paginated in relation to each individual document therein. 
2 

computer intake station on the premises. Pl.’s Att’y Letter (“Letter”) at 1. LabCorp’s computer 

intake station was in close proximity to a Quest Diagnostics intake station, and Ms. LeeThomas’s personal health information was visible to another patient who was using the Quest 

Diagnostics station. Compl. at 3. When Ms. Lee-Thomas realized her health information was 

being disclosed within eyesight and earshot of another patient, she informed a LabCorp 

technician of the violation and photographed the two stations in question. Id.

On July 3, 2017, Ms. Lee-Thomas sent a letter to Providence Hospital informing them of 

possible HIPAA privacy violations. See Letter. She then filed a complaint with the Department 

of Health and Human Services’s (“HHS”) Office of Civil Rights. HHS Compl. at 2. On October 

10, 2017, Ms. Lee-Thomas filed an additional complaint with the District of Columbia’s Office 

of Human Rights (“OHR”) citing LabCorp’s failure to make proper “public accommodations” by 

maintaining non-HIPAA compliant facilities. Compl. at 2–3. 

Both of Ms. Lee-Thomas’s administrative complaints were unsuccessful. See HHS Resp.; 

OHR Resp. On November 15, 2017, HHS informed Ms. Lee-Thomas the agency would not 

pursue her claim. HHS Resp. at 1–3. On November 28, 2017, the District of Columbia alerted 

Ms. Lee-Thomas that her complaint was similarly dismissed based on her failure to state a claim. 

OHR Resp. at 1–2. The District of Columbia informed Ms. Lee-Thomas of her right to bring a 

private action before the D.C. Superior Court and Ms. Lee-Thomas proceeded to do so. Id. at 2. 

LabCorp removed the case to this Court pursuant to 28 U.S.C. § 1446. Def.’s Notice of Removal 

(“Notice”), ECF No. 1. 

Before the Court is LabCorp’s motion to dismiss pursuant to Rule 12(b)(6) on the ground 

that Ms. Lee-Thomas failed to state a claim because HIPAA does not provide for a private cause 
3 

of action. Fed. R. Civ. P. 12(b)(6); Def.’s Mot. Dismiss (“Def.’s Mot.”), ECF No. 3. For the 

forthcoming reasons, the Court grants LabCorp’s motion to dismiss. 

III. LEGAL STANDARD 

The Federal Rules of Civil Procedure require that a complaint contain a “short and plain 

statement of the claim” in order to give the defendant fair notice of the claim and the grounds 

upon which it rests. Fed. R. Civ. P. 8(a)(2). A motion to dismiss under Rule 12(b)(6) does not 

test a plaintiff’s likelihood of success on the merits, but rather whether a plaintiff has properly 

stated a claim upon which relief may be granted. See Scheuer v. Rhodes, 416 U.S. 232, 236 

(1974). A court considering a motion to dismiss presumes the complaint’s factual allegations are 

true and must construe them in the light most favorable to the plaintiff. See, e.g., United States v. 

Philip Morris, Inc., 116 F. Supp. 2d 131, 135 (D.D.C. 2000). 

“[T]o survive a motion to dismiss, a complaint must contain sufficient factual matter . . . 

to ‘state a claim to relief that is plausible on its face.’” Ashcroft v. Iqbal, 556 U.S. 662, 678 

(2009) (quoting Bell Atl. Corp. v. Twombly, 550 U.S. 544, 570 (2007)). Assuming all factual 

allegations are true, a plaintiff’s right to relief must rise above “the speculative level.” Twombly, 

550 U.S. at 555–56 (2007) (citations omitted). 

Because she has filed this lawsuit pro se, Ms. Lee-Thomas’s claim is held to a “less 

stringent standard than formal pleadings.” Erickson v. Pardus, 551 U.S. 89, 94 (2007) (quoting 

Estelle v. Gamble, 429 U.S. 97, 106 (1976)). That being said, pro se plaintiffs must still comply 

with the Federal Rules of Civil Procedure, see Jarrell v. Tisch, 656 F. Supp. 237, 239 (D.D.C. 

1987), and the Court need not assume the role of plaintiff’s advocate. See Davis v. Kelly, 160 

F.3d 917, 922 (2d Cir. 1998); Sun v. D.C. Gov’t, 133 F. Supp. 3d 155, 168 n.6 (D.D.C. 2015) 
4 

(“[I]t is not the Court’s job to canvass the record for documents supporting a pro se party’s 

position.”). 

IV. ANALYSIS 

Ms. Lee-Thomas alleges that the public nature of LabCorp’s medical intake computer 

station violated HIPAA’s privacy protections. Compl. at 3. LabCorp contends that no private 

cause of action exists under HIPAA and, as such, Ms. Lee-Thomas’s claim should be dismissed 

for failure to state a claim. Def.’s Mot at 1–2. Additionally, after LabCorp moved for dismissal 

on March 16, 2018, Ms. Lee-Thomas failed to file a timely memorandum of points and 

authorities in opposition to LabCorp’s motion and, therefore, pursuant to Local Rule 7(b), 

conceded her opposition to the motion. See Local Civ. R. 7(b). The Court will address both 

grounds for dismissal below. 

A. Private Cause of Action Under HIPAA 

LabCorp asserts that dismissal of Ms. Lee-Thomas’s claim is appropriate because HIPAA 

provides for no private cause of action. Def.’s Mot. 1–2. HIPAA regulates the confidentiality of 

medical information by imposing privacy requirements on the Department of Health and Human 

Services, healthcare providers, and insurers. See Health Insurance Portability and Accountability 

Act, Pub. L. No. 104-191, § 262 (codified as 42 U.S.C. §§ 1320d to d-8); Logan v. Dep’t of 

Veterans Affairs, 357 F. Supp. 2d 149, 155 (D.D.C. 2004). While the statute provides both civil 

and criminal penalties for improperly handled or disclosed information, the language of the 

statute specifically limits enforcement action to HHS and individual states’ attorneys general. 

See 42 U.S.C. §§ 1320d-5 to d-6 (defining terms and enforcement protocol); Hudes v. Aetna Life 

Ins., Co., 806 F. Supp. 2d 180, 196 (D.D.C. 2011), aff’d, 493 F. App’x 107 (D.C. Cir. 2012). 

Furthermore, courts in this and other circuits that have considered the question have reached a 
5 

consensus that the statutory language of HIPAA grants no private right of action. See, e.g., 

Adams v. Eureka Fire Prot. Dist., 352 F. App’x 137, 138–39 (8th Cir. 2009) (noting that “Courts

have repeatedly held” that HIPAA does not create a private right of action); Acara v. Banks, 470 

F.3d 569, 571–72 (5th Cir. 2006) (“Every district court that has considered this issue is in 

agreement that the statute does not support a private right of action.”); Briscoe v. Costco 

Wholesale Corp., 61 F. Supp. 3d 78, 90 (D.D.C. 2014) (finding that plaintiff’s complaint lacked 

cognizable legal theory because HIPAA provides no private cause of action); Hudes, 806 F. 

Supp. 2d at 195–96 (collecting cases indicating no private HIPAA cause of action); Johnson v. 

Quander, 370 F. Supp. 2d 79, 100 (D.D.C. 2005) (dismissing HIPAA claim involving disclosure 

of medical information because no private cause of action existed), aff’d, 440 F.3d 489 (D.C. 

Cir. 2006). 

LabCorp’s alleged HIPAA violation is the only cause of action Ms. Lee-Thomas has 

included in her case. Compl. at 2–3. Given the statutory language and the clear consensus among 

courts that have addressed the question, no private action exists under HIPAA and accordingly 

Ms. Lee-Thomas has failed to state a claim upon which relief can be granted.3

 

B. Plaintiff’s Failure to Respond to the Motion Under Local Rule 7(b) 

While this Court does not recognize a private cause of action under HIPAA, even if Ms. 

Lee-Thomas’s complaint had stated a cognizable claim, Ms. Lee-Thomas’s failure to respond to 

LabCorp’s motion to dismiss further necessitates dismissal of her case. See Local Civ. R. 7(b) 

(“Within 14 days of the date of service or at such other time as the Court may direct, an opposing 

 3 Although the D.C. OHR informed Ms. Lee-Thomas of her ability to pursue a private 

action in D.C. Superior Court, see OHR Resp. at 2, OHR was referring solely to a claim pursuant 

to the D.C. Human Rights Act, which plaintiff does not raise here. See D.C. Code §§ 2-1402–

1403; OHR Resp. at 2. 
6 

party shall serve and file a memorandum of points and authorities in opposition to the motion. If 

such a memorandum is not filed within the prescribed time, the Court may treat the motion as 

conceded.”) Though this circuit has rejected the application of this standard to motions for 

summary judgment, see Winston & Strawn, LLP v. McLean, 843 F.3d 503, 507–08 (D.C. Cir. 

2016), it remains in place for motions to dismiss. Id. at 508 (“[N]othing in this opinion is meant 

to address the applicability of Local Rule 7(b) to motions other than motions for summary 

judgment”); see, e.g., Cohen v. Bd. of Trs. of the Univ. of the Dist. of Columbia, 819 F.3d 476, 

484 (D.C. Cir. 2016) (affirming district court decision to grant motion to dismiss as conceded 

under local rule); Habliston v. FINRA Dispute Resolution, Inc., 251 F. Supp. 3d 240, 245 

(D.D.C. 2017) (applying Local Civ. R. 7(b) to motion to dismiss). 

Thus, when a plaintiff fails to address or respond to a motion to dismiss, as happened 

here, the Court may treat that motion as conceded. See Local Civ. R. 7(b). LabCorp filed a 

motion to dismiss on March 16, 2018. See Def.’s Mot. at 3. The Court ordered Ms. Lee-Thomas 

to file a response by April 25, 2018. Fox/Neal Order at 2, ECF No. 8. Ms. Lee-Thomas never 

filed a response, and therefore, under Local Rule 7(b), the matter is conceded. 

V. CONCLUSION 

For the foregoing reasons, Defendant LabCorp’s Motion to Dismiss (ECF No. 3) is 

GRANTED. An order consistent with this Memorandum Opinion is separately and 

contemporaneously issued. 

Dated: June 15, 2018 RUDOLPH CONTRERAS 

 United States District Judge