What are the facts?
The plaintiff, Horne, received treatment from the defendant, Dr. Patton (a health-care provider), during which the physician acquired confidential medical information about Horne. Without Horne's consent, Dr. Patton disclosed this sensitive medical information to Horne's employer and/or others not involved in her care. The disclosure allegedly led to Horne's humiliation, mental anguish, and adverse employment consequences. Horne filed suit asserting that Dr. Patton's extra-judicial disclosure violated a physician's duty of confidentiality and constituted an invasion of privacy and/or breach of an implied contract of confidentiality. The trial court sustained demurrers (or otherwise dismissed) on the ground that Alabama lacked a physician-patient evidentiary privilege and that the complaint failed to state a cognizable cause of action. Horne appealed.
What is the legal issue?
Does Alabama recognize a civil cause of action against a physician (or dentist) for making an unauthorized extra-judicial disclosure of confidential medical information obtained in the course of treatment, and, if so, what are the contours and exceptions of that duty?
What rule applies?
A physician (including dentists and other health-care providers in a physician-like role) owes a common-law duty to maintain the confidentiality of medical information acquired in the course of the professional relationship. Unauthorized, extra-judicial disclosure of such information can give rise to liability sounding in tort (e.g., invasion of privacy/breach of fiduciary duty) and/or in contract (breach of an implied promise of confidentiality). This duty is distinct from, and not limited by, the absence of an evidentiary physician-patient privilege. Recognized exceptions permit disclosure when: (1) required or authorized by law (e.g., public health reporting, court order, subpoena with appropriate safeguards); (2) necessary to protect or advance the patient's care (including consultation among health-care personnel involved in treatment); (3) justified by a superior public interest (e.g., preventing serious harm to identifiable third parties or controlling communicable diseases); (4) consented to by the patient (expressly or impliedly); or (5) reasonably necessary to defend the physician in litigation initiated by the patient regarding the care. Damages may include mental anguish and, upon proper showing, punitive damages for willful or malicious breaches.
What did the court hold?
Yes. The Alabama Supreme Court recognized a common-law duty of medical confidentiality and held that the plaintiff's complaint stated cognizable tort and contract claims for unauthorized disclosure. The court reversed the dismissal and remanded, noting that whether any exception or privilege justified the disclosure is a factual question not resolvable on the pleadings.
What is the reasoning?
The court began by distinguishing evidentiary privileges from substantive duties. Although Alabama historically had limited statutory or common-law physician-patient privileges in the evidentiary sense, that absence did not negate a provider's extra-judicial duty to keep patient information confidential. The court traced the duty's pedigree to the Hippocratic Oath and compared it to the attorney-client duty, emphasizing that patient candor and effective medical treatment depend on confidence that private facts will not be disclosed without consent. Surveying other jurisdictions and secondary authorities, the court recognized that modern common law supports patient claims for unauthorized disclosures, either as an invasion of privacy or as a breach of an implied contract arising from the professional relationship. The court aligned this duty with Alabama's already-established invasion-of-privacy jurisprudence, under which wrongful publicity of private facts is actionable. It also noted that restricting the duty to a rigid rule would be impractical; thus, the court articulated narrow exceptions that balance patient confidentiality with competing interests in public health, patient care, and due process. Examples include mandatory reporting statutes, necessary communications among treating personnel, and disclosures made in self-defense when the patient puts care at issue in litigation. Applying these principles, the court concluded that Horne had adequately alleged an extra-judicial disclosure of confidential medical information, a lack of consent, and resultant harm (including mental anguish). On the pleadings, the court could not determine whether any exception or qualified privilege applied to justify the disclosure to a non-treating third party such as an employer. Those issues were for proof, not for dismissal. Accordingly, the complaint stated viable causes of action in tort and implied contract, warranting reversal and remand.
Why is this case significant?
Horne v. Patton is a foundational Alabama case on medical confidentiality. It establishes that: (1) the physician-patient relationship creates a substantive duty of confidentiality enforceable in tort and contract; (2) that duty is independent of evidentiary privileges; (3) mental-anguish damages are recoverable for wrongful disclosures; and (4) limited, policy-driven exceptions exist but are narrowly construed and fact-dependent. For law students, the case illustrates how courts craft common-law duties from professional norms, reconcile them with competing public interests, and translate those duties into actionable claims under privacy and implied-contract theories.
How does Horne distinguish between evidentiary privilege and the duty of confidentiality?
The court explains that an evidentiary privilege governs whether a communication is admissible or discoverable in litigation, while the duty of confidentiality regulates a provider's conduct outside court. Alabama's limited evidentiary privilege does not preclude recognizing a common-law duty prohibiting extra-judicial disclosures; Horne enforces that separate duty through tort and contract remedies.
What exceptions allow a physician to disclose confidential information under Horne?
The court identifies narrow exceptions: disclosures required or authorized by law (e.g., public health reporting, court orders), disclosures necessary for patient care (including consultations with involved health personnel), disclosures justified by a superior public interest (such as preventing serious harm to others or controlling communicable diseases), disclosures with the patient's consent, and disclosures reasonably necessary to defend against claims the patient brings regarding the care.
What causes of action are available for unauthorized disclosure?
Horne recognizes two primary avenues: (1) tort claims, typically framed as invasion of privacy or breach of a fiduciary/confidential relationship; and (2) contract claims for breach of an implied promise of confidentiality arising from the physician-patient relationship. Depending on the facts, related torts such as negligence or, if statements are false and published, defamation may also be implicated.
What damages can a plaintiff recover under Horne?
Compensable damages include actual losses such as mental anguish, humiliation, and any resulting economic harm (e.g., lost employment). Where the breach is willful, wanton, or malicious, punitive damages may be available to punish and deter egregious violations of medical confidentiality.
Does Horne create an absolute bar against disclosures to an employer?
No. Disclosures to non-treating third parties like employers are presumptively improper unless they fall within a recognized exception (e.g., patient's informed consent, a legal mandate, or a clearly defined public-interest necessity). Whether an exception or qualified privilege applies is a fact question; blanket employer inquiries do not automatically justify disclosure.