if someone can get 1.4 million and the records weren't even shared with a 3rd party like in my case, that is what has me questioning your comment.
Holy firetruck balls!, I've had two notifications from my medical providers my information has been compromised. (Insurance company and medical group.) $1.4 million per violation? Awesome! Sign me up.
Now, my records were not compromised by malfeasance, but by misfeasance, but it seems like I should join the ride on the gravy train.
Look, we all understand you feel you have been hurt. Your later claims in this thread are of no merit. But, is there ANYTHING you can claim?
That is so fact sensitive and difficult that we simply cannot advise here. To me, claiming against the agency is a non-starter for any of a number of reasons. Claiming against a specific person for specific acts as related to what they provably know? Maybe.
In reality, the bottom line is that the current scheme that all health records must be electronic, guarantees they will be public and violated in some way. Those who demanded such for our benefit, had no idea of the reality. To be sure, great strides are being made in medical care from the ability to farm the data. As well, it is different to have a specific violation over a general one.
The problem you face is to make a differentiation (Praise Jesus for spell check.) and prove the difference caused you damages. The link for your damages will be hard, as will the amount of the damages. The times a cost of defense is "damages" are statutory and rare. I don't think we have statutory damages here.