ZAFREEN NAYANI v. NEENA BHATIA

Court of Appeals of Georgia·Decided March 12, 2024·No. A23A1716·Published

Opinion

SECOND DIVISION

MERCIER, C. J.,

MILLER, P. J., and HODGES, J.

NOTICE: Motions for reconsideration must be physically received in our clerk’s office within ten days of the date of decision to be deemed timely filed.

https://www.gaappeals.us/rules

March 12, 2024

In the Court of Appeals of Georgia A23A1716. NAYANI v. BHATIA et al.

HODGES, Judge.

Zafreen Nayani sued Neena Bhatia and Amina Hassanali (collectively, ‘the defendants”) alleging that Bhatia, in concert with Hassanali, improperly accessed Nayani’s medical records without authorization. The State Court of DeKalb County granted the defendants’ motion for summary judgment and Nayani appeals, arguing that the trial court improperly concluded that she failed to present evidence of damages as required for claims of invasion of privacy and violation of the Georgia Computer Systems Protection Act; failed to present sufficient evidence of civil conspiracy; and was not entitled to attorney fees under OCGA § 13-6-11 and punitive

damages. For the following reasons, we affirm the trial court’s judgment in part, reverse in part, and remand this case for further proceedings.

Our standard of review for motions for summary judgment is well-settled:

Summary judgment is appropriate when there is no genuine issue of material fact and the movant is entitled to judgment as a matter of law.

In reviewing the grant or denial of a motion for summary judgment, we apply a de novo standard of review, and we view the evidence, and all reasonable conclusions and inferences drawn from it, in the light most favorable to the nonmovant.

(Citation omitted.) Grizzle v. Norsworthy, 292 Ga. App. 303, 303-304 (664 SE2d 296) (2008). So viewed, the record reveals1 that nurse practitioner Bhatia began working at Amina Medical, a medical practice owned by Hassanali and Nayani’s husband,

1 Nayani’s appellate briefs contain a confounding violation of our rules. In each brief, Nayani’s record citations primarily reference her brief in opposition to the defendants’ summary judgment motion, rather than to the underlying facts themselves. Compounding this error is that the citations in the brief in opposition themselves refer to documents by name only. In short, there are precious few references in Nayani’s brief that meaningfully refer to the record. Though not fatal, this “failure to provide specific citations to the record as required by the rules of this Court has hampered our review of this case.” Conner v. Norman Sosebee Funeral Home, 303 Ga. App. 352, 353 (1) (693 SE2d 534) (2010). See Court of Appeals Rule 25 (d) (2) (“Reference to an electronic record should be indicated by the volume number of the electronic record and the PDF page number within that volume (Vol. Number – PDF Page Number; for example, V2-46).”).

Kamal Nayani, in September 2018. Bhatia also worked at Sugarloaf Urgent and Primary Care, a medical practice in which Nayani had a one-half ownership interest.

On April 3, 2019, as part of a brewing business dispute, Hassanali locked Nayani and her husband out of the Amina medical practice.2 Thereafter, on April 10, 2019, while Bhatia was working at the Amina location, an employee at the Sugarloaf location noted that Nayani’s medical file was open. Electronic data suggested that Bhatia, or someone using her login credentials, had accessed Nayani’s medical records.3 Nayani testified that she had not given Bhatia permission to access her records and had never been seen by Bhatia as a patient. When Nayani confronted Bhatia in a recorded telephone conversation, Bhatia flatly denied accessing the records. In unverified

2 For a description of the parties’ business dispute, see Nayani v. Hassanali, 362 Ga. App. 313 (868 SE2d 465) (2022) (affirming grant of partial summary judgment to Hassanali on multiple claims including fraud, breach of contract, and breach of fiduciary duty).

3 Access to Nayani’s medical chart through the practice’s “Practice Fusion”

software required two-factor authentication, requiring both a password and confirmation through a second device, such as a cell phone. Bhatia testified that no one knew her password for Practice Fusion and that no one else used her phone away from home.

discovery responses, however, Bhatia stated that she had accessed the records at Nayani’s “prompting, in [Nayani’s] presence, and with [Nayani’s] permission.”4 Nayani then sued Bhatia and Hassanali for civil conspiracy, violation of the Georgia Computer Systems Protection Act (“GCSPA”), invasion of privacy, negligence, attorney fees, and punitive damages. In large part, the trial court granted the defendants’ motion, concluding that Nayani: (1) “did not claim an injury serious enough to meet the threshold justifying a claim of tortious invasion of privacy[;]” (2) failed to “plead or prove any physical or monetary injury or injury to her property” as required by OCGA § 16-9-93 (c) to show a GCSPA violation; (3) failed to present any evidence of negligence against Hassanali; and (4) provided “no evidence for Defendant Hassanali’s involvement in the alleged access of [Nayani’s] medical records[,]” resulting in the dismissal of her claim for civil conspiracy. The trial court denied Bhatia’s motion as to Nayani’s claim of negligence against her, noting that “questions of fact remain for the jury whether . . . Defendant Bhatia accessed [Nayani’s] medical record and whether . . . she had permission to do so[.]” The trial

4 There is no evidence that Bhatia, Hassanali, or anyone else ever printed, disseminated, shared, or otherwise disclosed the content of the medical records to another person, and Nayani later withdrew any claims concerning “disclosure of private facts to third parties.”

court also granted the defendants’ motion as to Nayani’s claims for attorney fees and punitive damages. This appeal follows.

1. Nayani first contends that the trial court erred in granting the defendants summary judgment on her claim of invasion of privacy because she did not “claim an injury serious enough to meet the threshold justifying a claim of tortious invasion of privacy[.]” Although Nayani did not identify any specific monetary damages or damage to her property, she may yet be entitled to either nominal damages under OCGA § 51-12-4 or damages for injury to her “peace, happiness, or feelings” pursuant to OCGA § 51-12-6. As a result, we reverse the trial court’s order granting the defendants summary judgment as to invasion of privacy.

Georgia law incorporates “four disparate torts under the common name of invasion of privacy.” (Citation and punctuation omitted.) Bullard v. MRA Holding, 292 Ga. 748, 751 (2) (740 SE2d 622) (2013). Of those four torts, the one that is relevant to this case is the alleged “intrusion upon the plaintiff’s seclusion or solitude, or into [her] private affairs[.]” (Citation omitted.) Id. “The ‘unreasonable intrusion’ aspect of the invasion of privacy involves a prying or intrusion, which would be offensive or objectionable to a reasonable person, into a person’s private concerns.”

Yarbray v. S. Bell Tel. & Telegraph Co., 261 Ga. 703, 705 (409 SE2d 835) (1991). “[A] patient’s medical information, as reflected in the records maintained by his or her medical providers, is certainly a matter which a reasonable person would consider to be private.” King v. State, 272 Ga. 788, 790 (1) (535 SE2d 492) (2000); see also Baker v. Wellstar Health Systems, 288 Ga. 336, 338 (2) (703 SE2d 601) (2010) (“Though HIPAA preempts Georgia law in its imposition of procedural requirements, the substantive right to medical privacy under Georgia law endures.”);5 King, 272 Ga. at 790 (1) (“Medical records are within the right of privacy afforded by the Federal Constitution. Because Georgia recognizes an even broader concept of privacy, the personal medical records of this state’s citizens clearly are protected by that right as guaranteed by our constitution.”).

In addition, commentary to the Restatement (Second) of Torts suggests that invasion of privacy

Free access — add to your briefcase to read the full text and ask questions with AI

ZAFREEN NAYANI v. NEENA BHATIA, (Ga. Ct. App. 2024).

ZAFREEN NAYANI v. NEENA BHATIA (ZAFREEN NAYANI v. NEENA BHATIA) — published by Counsel Stack Legal Research, free access to 12M+ legal documents.

Related

Callahan v. Panfel
395 S.E.2d 80 (Court of Appeals of Georgia, 1990)
Roberts v. Lane
435 S.E.2d 227 (Court of Appeals of Georgia, 1993)
Grizzle v. Norsworthy
664 S.E.2d 296 (Court of Appeals of Georgia, 2008)
King v. State
535 S.E.2d 492 (Supreme Court of Georgia, 2000)
Mixon v. Phoenix Landscaping, Inc.
221 S.E.2d 225 (Court of Appeals of Georgia, 1975)
Holland v. Sanfax Corporation
126 S.E.2d 442 (Court of Appeals of Georgia, 1962)
Dierkes v. Crawford Orthodontic Care, P.C.
643 S.E.2d 364 (Court of Appeals of Georgia, 2007)
Sletto v. Hospital Authority of Houston County
521 S.E.2d 199 (Court of Appeals of Georgia, 1999)
First Federal Savings Bank v. Hart
363 S.E.2d 832 (Court of Appeals of Georgia, 1987)
City of Gainesville v. Dodd
573 S.E.2d 369 (Supreme Court of Georgia, 2002)
Davis v. Whitford Properties, Inc.
637 S.E.2d 849 (Court of Appeals of Georgia, 2006)
Conner v. NORMAN SOSEBEE FUNERAL HOME
693 S.E.2d 534 (Court of Appeals of Georgia, 2010)
Yarbray v. Southern Bell Telephone & Telegraph Co.
409 S.E.2d 835 (Supreme Court of Georgia, 1991)
Anderson v. Mergenhagen
642 S.E.2d 105 (Court of Appeals of Georgia, 2007)
Baker v. Wellstar Health System, Inc.
703 S.E.2d 601 (Supreme Court of Georgia, 2010)
Baker v. Wellstar Health System, Inc.
703 S.E.2d 600 (Court of Appeals of Georgia, 2010)
Bullard v. MRA Holding, LLC
740 S.E.2d 622 (Supreme Court of Georgia, 2013)
Lyman v. Cellchem International, Inc.
796 S.E.2d 255 (Supreme Court of Georgia, 2017)
R. R. R. Ltd. Partnership v. Investguard, Ltd.
463 S.E.2d 735 (Court of Appeals of Georgia, 1995)
Fed. Deposit Ins. Corp. v. Loudermilk
826 S.E.2d 116 (Supreme Court of Georgia, 2019)