Bradford v. Asian Health Services

CourtDistrict Court, N.D. California
DecidedJune 7, 2024
Docket3:24-cv-01060
StatusUnknown

This text of Bradford v. Asian Health Services (Bradford v. Asian Health Services) is published on Counsel Stack Legal Research, covering District Court, N.D. California primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook
Bradford v. Asian Health Services, (N.D. Cal. 2024).

Opinion

1 2 3 4 UNITED STATES DISTRICT COURT 5 NORTHERN DISTRICT OF CALIFORNIA 6 7 IRA BRADFORD, Case No. 24-cv-01060-TLT 8 Plaintiff, Alameda County: Case No. 23-cv-033070

9 v. ORDER REMANDING ACTION TO STATE COURT AND ORDER 10 ASIAN HEALTH SERVICES, DENYING STIPULATED REQUEST TO STAY 11 Defendant. Re: ECF Nos. 16, 17, 27 12

13 Before the Court is Plaintiff, Ira Bradford’s Motion to Remand and the non-party United 14 States’ Motion to Remand. ECF Nos. 16, 17. Defendant, Asian Health Services, opposes both 15 motions. ECF Nos. 18, 19. Both movants filed replies. ECF Nos. 20, 21. Also before the Court 16 is a Stipulation to Stay Motions Pending a Ninth Circuit Ruling, signed by both parties along with 17 the non-party United States. ECF No. 27. The Court finds that the motion to remand and request 18 to stay suitable for decision without oral argument pursuant to Civil Local Rule 7-1(b). 19 The Court, having read and the pleadings, motions filed, opposition, reply and stipulations, 20 and having duly considered all the arguments contained therein along with the evidentiary 21 attachments, the Court REMANDS the action, and DENIES the request to stay as moot. 22 I. INTRODUCTION 23 Defendant Asian Health Services (“Defendant” or “AHS”) is a private, nonprofit entity and 24 provider of health services that has received some grant funding from the Health Resources and 25 Services Administration, an agency of the United States Department of Health & Human Services 26 (“HHS” or “the Department”). ECF No. 17 (Motion to Remand), at 7. Defendant must apply for 27 funding, and it is estimated that about 7% of its total funding from April 2022 through March 1 2023 was derived from federal award funding. Id. 2 In May 2023, Defendant announced that it discovered a “data security incident” that had 3 occurred in February 2023. Id. Suspicious activity in an employee’s email account led it to 4 conduct an investigation with “third-party experts” through which it “determined that an 5 unauthorized person” may have accessed an email account that contained at least one patient’s 6 information. Id. at 7-8 (quoting an excerpt from a public website of Defendant’s 7 https://asianhealthservices.org/wp-content/uploads/2023/05/AHS-Data-Release.pdf) (last visited 8 Mar. 22, 2204). 9 Plaintiff Ira Bradford is an individual that resides in California who has received services 10 from Defendant. ECF No. 1-1 (Exhibit A to Notice of Removal (“Complaint”)) ¶¶ 14, 15, 17. 11 Plaintiff alleges his (along with the putative class members’)1 personal health information (“PHI”) 12 and/or personally identifiable information (“PII”) was exposed due to the alleged unauthorized 13 access. The data breach prompted the putative class action filed by Plaintiff. See generally, ECF 14 No. 1-1 (Complaint). 15 Plaintiff filed the class action complaint initially in the Superior Court of California for the 16 County of Alameda (“Alameda County” or “state court”) alleging that Defendant failed to 17 properly secure and safeguard Plaintiff’s PHI and/or PII stored within Defendant’s information 18 network. ECF No. 1-1 (Complaint), at 3-4. Nine months after the class action complaint was filed 19 in Alameda County, Defendant removed the action to federal court under 42 U.S.C. § 233(l)(2) 20 and 28 U.S.C. § 1442(a)(1). ECF No. 1 (Notice of Removal), at 4-5. This removal was initiated 21 after (1) discovery had commenced in state court, (2) Defendant had filed a demurrer, and (3) 22 Plaintiff had responded to the demurrer. 23 On May 23, 2024, the parties, and non-party United States, filed a stipulation to stay the 24 pending motions to remand pending resolution of the appeal in Blumberger v. Tilley, No. 22- 25 56032 (“Blumberger”), currently pending in the Ninth Circuit. ECF No. 27. 26 27 II. FACTS 1 Plaintiff alleges Defendant learned of a data breach on February 13, 2023 after discovering 2 that an unauthorized person infiltrated an employee email account that was kept unprotected (the 3 “Data Breach”) contained highly sensitive PHI/PII. See ECF No. 1-7 (Exhibit F to Notice of 4 Removal), at 3-4; see also ECF No. 1-1 (Complaint) ¶¶ 3, 6, 35. Plaintiff claims he was not 5 notified of the Data Breach until, two and a half months later, on May 5, 2023. ECF No. 1-1 6 (Complaint) ¶¶ 4, 36, 38. Plaintiff further claims that they “were required to provide their PHI/PII 7 to Defendant to receive services or employment and as part of providing services or employment. 8 If is further alleged that Defendant created, collected, and stored Plaintiff’s PHI/PII with the 9 reasonable expectation and mutual understanding that Defendant would comply with its 10 obligations to keep such information confidential and secure from unauthorized access.” Id. ¶ 41. 11 The information Defendant stored was ultimately affected by the Data Breach. Id. Plaintiff 12 claims that he suffered imminent and impending injury arising from the substantially increased 13 risk of fraud, identity theft and misuse resulting from their PHI and PII potentially being placed in 14 the hands of criminals. Id. ¶¶ 9, 84, 85. 15 The Complaint does not appear to state that the PHI/PII was required in connection with 16 any medical, surgical, dental, or related functions that Defendant rendered to Plaintiff. See 17 generally id. One of the exhibits shows Plaintiff’s “personal health information” and “limited 18 personal health information” may have been accessed by an “unauthorized person—purporting to 19 be an outside provider communicating with CLINICIAN about patient care” through the email 20 account of a “dietician, certified educator, and [ ] AHS employee”. ECF No. 1-3 (Exhibit C to 21 Notice of Removal), at 2-3. 22 III. PROCEDURAL HISTORY 23 On May 11, 2023, Plaintiff filed an action regarding this event in the state court. See id. 24 The complaint alleges the following causes of action: (1) Negligence (id. ¶¶ 86-111); (2) 25 Negligence Per Se (id. ¶¶ 112-121); (3) Breach of the Implied Contract (id. ¶¶ 122-130); (4) 26 Breach of the Implied Covenant of Good Faith and Fair Dealing (id. ¶¶ 131-135); (5) California 27 Confidentiality of Medical Information Act (Cal. Civ. Code § 56 et seq) (id. ¶¶ 136-143); (6) 1 California Customer Records Act (Cal. Civ. Code §§ 1798.80 et seq.) (id. at 31:6-32:12); (7) 2 California Unfair Competition Law (Cal. Bus. & Prof. Code §§ 17200 et seq) (id. at 32:13-34:20). 3 Plaintiff does not bring claims for direct violations of HIPAA (or any other federal laws). Id. at 8. 4 Instead, Plaintiff alleges Defendant engaged in various legal violations predicated upon the duties 5 set forth in HIPAA. Id. at 8. 6 Defendant filed a demurrer in state court on August 22, 2023. See Bradford v. Asian 7 Health Svcs., Case No. 23-cv-033070, Docket No. 20. During this time, Defendant claims it was 8 covered by HHS because of a letter Defendant claims “deemed” it an entity from January 1, 2023 9 through December 31, 2023. ECF No. 1-2 (Exhibit B to the Notice of Removal). The Parties 10 litigated the case in state court, propounding and answering a full round of formal discovery. ECF 11 No. 16 (Plaintiff’s Motion), at 9:3-7; ECF No. 16-1 (Declaration of Elizabeth Klos in support of 12 Plaintiff’s Motion (“Klos Decl.”)) ¶ 5. 13 Throughout this process, the parties also engaged in discussions about the possibility of 14 ADR and settlement. See e.g., ECF No. 29 (Plaintiff’s Responses to Court’s Notice of Questions) 15 ¶¶ 1-3; ECF No. 30 (Defendant’s Responses to Court’s Notice of Questions), at 2:9-15. Given the 16 prospect of settlement, the Parties continued the demurrer’s briefing schedule multiple times. ECF 17 No.

Free access — add to your briefcase to read the full text and ask questions with AI

Related

Hilton v. Braunskill
481 U.S. 770 (Supreme Court, 1987)
Gutierrez De Martinez v. Lamagno
515 U.S. 417 (Supreme Court, 1995)
Martin v. Franklin Capital Corp.
546 U.S. 132 (Supreme Court, 2005)
Nken v. Holder
556 U.S. 418 (Supreme Court, 2009)
Gabriel v. Preble
396 F.3d 10 (First Circuit, 2005)
Leiva-Perez v. Holder
640 F.3d 962 (Ninth Circuit, 2011)
FTC v. Qualcomm Incorporated
935 F.3d 752 (Ninth Circuit, 2019)
Al Otro Lado v. Chad Wolf
952 F.3d 999 (Ninth Circuit, 2020)
Candace J. Thomas v. Albany Area Primary Healthcare Inc.
972 F.3d 1195 (Eleventh Circuit, 2020)
Connie Dietrich v. the Boeing Company
14 F.4th 1089 (Ninth Circuit, 2021)
Lopez-Alvarado v. Ashcroft
371 F.3d 1111 (Ninth Circuit, 2004)
O'Brien v. United States
56 F.4th 139 (First Circuit, 2022)

Cite This Page — Counsel Stack

Bluebook (online)
Bradford v. Asian Health Services, Counsel Stack Legal Research, https://law.counselstack.com/opinion/bradford-v-asian-health-services-cand-2024.