Medical Identity Theft in Tennessee: Protecting Your TennCare and Health Records

When most people think of identity theft, they imagine a thief maxing out a stolen credit card to buy a TV. However, medical identity theft is arguably much more dangerous. In Tennessee, criminals frequently steal personal information to obtain medical treatment, secure prescription drugs, or bill fake services to TennCare (Tennessee's Medicaid program) or private insurance.

This crime creates a terrifying ripple effect. If a thief uses your name at a hospital in Chattanooga or Clarksville, their medical history-their blood type, allergies, and diseases-gets permanently mixed into your official health records. If you later end up in the emergency room, doctors relying on those corrupted records could give you a lethal blood transfusion or the wrong medication. Furthermore, the massive medical bills generated by the thief will eventually be sent to collections, destroying your credit score and potentially maxing out your lifetime insurance limits.

This guide explains how to identify medical identity theft, how to force hospitals to fix your corrupted files under HIPAA, and how to defend yourself against aggressive medical debt collectors in Tennessee.

Step-by-Step Process to Fix Medical Identity Theft

Untangling medical fraud requires dealing with hospitals, insurance companies, and law enforcement. Follow these steps to secure your health and your finances.

Step 1: Request an Accounting of Disclosures

To identify fraudulent charges, contact your health insurer or TennCare to obtain an Explanation of Benefits (EOB) statement or claims history summary, which shows every provider that billed your policy. Under federal HIPAA rules, you can also request a formal 'Accounting of Disclosures' from healthcare providers pursuant to 45 C.F.R. § 164.528. Because routine treatment and billing disclosures are exempt from that report, an Accounting of Disclosures specifically reveals non-routine disclosures of your medical information made to third parties outside standard payment operations.

Step 2: File a Police Report

Medical ID theft is a crime under Tenn. Code Ann. § 39-14-150. You must file a police report with local law enforcement, such as the Knoxville Police Department, Knoxville, stating that someone is fraudulently using your identity to obtain healthcare services.

Step 3: Demand Record Correction from Providers

Contact the specific hospital or clinic where the thief received treatment. Provide your police report and demand that they separate the thief's medical information from your official file. Under HIPAA, you have the right to request amendments to your medical records to ensure they are accurate.

Step 4: Notify TennCare or Your Private Insurer

If you are on TennCare, immediately report the fraud to the Tennessee Bureau of Investigation, Nashville (which handles Medicaid fraud) and the TennCare fraud hotline. If the thief drained your benefits, you need the state to restore your eligibility.

Step 5: Dispute Collections under the FCRA

If fraudulent medical bills hit your credit report, you must send a formal dispute letter to the credit bureaus under 15 U.S.C. § 1681c-2, demanding they remove the debt because it resulted from identity theft.

Fixing Corrupted Medical Records (HIPAA Implications)

Hospitals are notoriously hesitant to alter medical records once they are created, citing internal liability policies. However, the federal Health Insurance Portability and Accountability Act (HIPAA) supersedes hospital policy. You have a federal right to review your file and demand corrections. If a Tennessee hospital refuses to remove the thief's drug addiction or diabetes diagnosis from your chart, you can file a formal civil rights complaint with the U.S. Department of Health and Human Services. Legal precedents, such as those regarding patient privacy in Givens v. Mullikin ex rel. McElwaney, 75 S.W.3d 383 (TN Supreme Court 2002), underscore the importance of maintaining strict and accurate control over medical data.

Fighting Fraudulent Medical Bills Sent to Collections

When the thief fails to pay the co-pays or deductibles, the hospital will hire a collection agency to harass you. Medical debt harassment is a separate legal issue from the initial theft. If a collector calls you demanding payment for an emergency room visit you never made, send them a written Cease and Desist letter along with your police report. Under 15 U.S.C. § 1692, if they continue to harass you or refuse to remove the debt from your credit profile, you can sue the collection agency in a federal court, such as the U.S. District Court for the Eastern District of Tennessee, Knoxville.

Reporting Prescription Fraud at TN Pharmacies

A highly dangerous form of medical ID theft occurs when a drug addict uses your stolen identity to fill prescriptions for controlled substances, like Oxycodone or Fentanyl, at local pharmacies. This can result in you failing an employer background check or even being mistakenly arrested for prescription fraud. If you discover this, you must immediately contact the Tennessee Department of Health, Nashville and local police to ensure the fraudulent prescriptions are flagged and your name is cleared in the state's Controlled Substance Monitoring Database.

How Much Does it Cost in Tennessee?

Fixing medical identity theft involves different fee structures depending on the action needed:

• Record Requests: Under HIPAA, hospitals generally cannot charge you a massive fee just to view your records, though they may charge a small copying fee (usually $10 to $25).
• FDCPA Lawsuits: If you are suing a medical debt collector for harassment, consumer protection attorneys generally work on a contingency basis (you pay $0 upfront). If you win, the collector must pay your legal fees.
• Complex Record Correction: If you have to hire a lawyer to force a stubborn hospital to fix your records, they may charge an hourly rate of $250 to $400 per hour.

How Long Does the Process Take?

Medical ID theft is notoriously slow to resolve. Hospitals typically have 60 days to respond to a formal HIPAA request to amend your medical records. Fighting the fraudulent medical bills and restoring your credit score can take anywhere from 3 to 6 months of aggressive letter-writing and legal disputes.

Frequently Asked Questions (FAQ)