trends

Porn, Privacy and the HIPAA

How can an industry that bears all to its consumers ever consider privacy to be a hot topic? The story of the possible infection spread rapidly throughout the community and even into mainstream press. I was personally contacted by Los Angeles's Tribune affiliate KTLA for a quote after the reporters there picked up the story from the Los Angeles Times.

As I write this article, what did not make it into the press were the actual identities of the performers infected or exposed in this most recent outbreak.

Dr. Sharon Mitchell, director of the AIM Healthcare Foundation, declined to make the identities of those performers known, citing confidentiality issues.

What Mitchell was referring to was a rather unknown law within the industry, the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Within HIPAA are confidentiality provisions of the Patient Safety Rule that prevent, in certain circumstances, the public disclosure of private healthcare information of a patient by a medical provider, health plan and health care clearing houses.

However, HIPAA does not apply to employers. The Privacy Rule does not prevent your employer from asking you information about your health if your employer needs the information to administer sick leave, workers' compensation, wellness programs or health insurance.

However, if your employer asks your health care provider directly for information about you, your provider cannot disclose the information in response without your authorization.

It should be noted that if your private medical information is disclosed by a medical provider, that medical provider or its employee may face civil as well as criminal liability.

Los Angeles woman was indicted under the federal HIPAA privacy law for accessing the private medical records of celebrity patients at UCLA Medical Center and selling information obtained from those files to a national media outlet. The celebrities whose records were breached reportedly included actress Farrah Fawcett, singer Britney Spears and California first lady Maria Shriver.

Many posters on adult message board GFY.com, as well as performers I talked to immediately after AIM reported the outbreak, indicated that they were not pleased that more information was not released. Several performers indicated that they felt as though it was their right to know since they could also become infected.

Unfortunately, until an outbreak such as this becomes a matter of public health, the information must remain confidential. The Privacy Rule allows medical providers, such as AIM, to disclose protected health information, without authorization, to a public health agency that is legally authorized to receive such reports for the purpose of preventing or controlling disease, injury or disability.

In this case, the Los Angeles County Public Health Department would be such an agency. Generally, medical providers are required to limit the protected health information disclosed for public health purposes to the minimum amount necessary to accomplish the public health purpose.

Unfortunately, HIPAA prevents the public disclosure of those that are infected or who may have been exposed.

However, individual performers that might be afraid that they were exposed could still inquire into the identity of those exposed to determine if they in fact were. Private disclosure in the interest of public health may be allowable.

Under the Privacy Rule, a medical provider may disclose protected health information to a person who is at risk of contracting or spreading a disease or condition if other law authorizes the covered entity to notify such individuals as necessary to carry out public health interventions or investigations.

For example, a covered health care provider may disclose protected health information as needed to notify a person that (s)he has been exposed to a communicable disease if the covered entity is legally authorized to do so to prevent or control the spread of the disease.

Other posters on GFY.com indicated that once a performer gained the knowledge of the identities of the infected and exposed individuals they should make it known to the rest of those in the industry.

Some even argued that this was allowable since HIPAA does not apply to individuals that do not have access to the medical records of those infected and or exposed. However, one must be aware that even though HIPAA may not prevent such a disclosure, there are common law torts that can result in a civil lawsuit if certain private facts are disclosed.

An infected performer that is outed by another individual can file a lawsuit under the common law theory of public disclosure of private facts. If a false report is made as to a performer's HIV positive status, that performer may have a claim for false light.

This is where the plaintiff is placed into a false light in the eyes of the public that may damage his/her career and cause emotional distress. Obviously, if someone misreports that a performer is HIV positive or even exposed to HIV that can cause great distress as well as the loss of a career. Damages for both public disclosure and false light could be extensive.

Overall, in an adult industry that leaves itself open to all that consume its product, there is still a need for privacy within the industry. However, it is apparent that the manner in which this last situation was handled was not to the satisfaction of other performers, directors, agents and producers in the San Fernando Valley.

They felt as though they deserved to know which performers were actively infected and which were on the quarantine list so as to protect themselves. Immediately after the outbreak I talked with numerous performers. Some of which indicated that they would be either leaving the industry, no longer doing boy/girl scenes, or rethinking what sexual acts they will do from this point forward. Lack of information can breed resentment and doubt.

There is little doubt in this writer's mind that sometime in the future, this issue will once again reappear.

How the industry handles it and what comes to light in the middle of a media storm will affect the industry's ability to remain autonomous. There has been a push once again to regulate the industry through legislation and public policy. Failure to heed these warnings can result in the regulation of the industry by groups on a national level that do not have the industry's best interest in mind.

Michael Fattorosi is founder and managing partner of Fattorosi & Associates, a full-service boutique law firm in Woodland Hills, Calif. For more information, visit www.AdultBizLaw.com.

Related:  

Copyright © 2026 Adnet Media. All Rights Reserved. XBIZ is a trademark of Adnet Media.
Reproduction in whole or in part in any form or medium without express written permission is prohibited.

More Articles

opinion

Why E-Payment Diversification Matters for Merchant Stability

Match payment methods to your customers. Look at where your customers are located, how they prefer to pay and which products they purchase. A business with significant European traffic may benefit from SEPA or Pay by Bank, while a subscription-based business may prioritize ACH or cryptocurrency. Add the payment methods your customers are most likely to use, as not every option is available.

Jonathan Corona ·
trends

AI at Work: The Tools and Practices Powering Creativity, Commerce and Compliance

For years, artificial intelligence felt like the plot of a science-fiction movie. Pop culture gave us Skynet from “The Terminator,” the replicants of “Blade Runner” and countless visions of machines replacing human creativity altogether. AI was cast as either humanity's next great breakthrough or the beginning of a dystopian future.

Jackie Backman ·
opinion

Key Questions Online Merchants Should Know About PCI Compliance

Choosing a payment provider involves more than comparing features and pricing. It's also about trusting that your customers' payment information is being handled securely. Every August, Segpay is recertified as a Level 1 PCI-compliant service provider, a milestone the company has achieved for the past 20 years. Having helped write Segpay's original PCI policy documents more than two decades ago, I've seen firsthand how PCI compliance has evolved.

Cathy Beardsley ·
profile

New Moon Network's Savannah Sly on Turning Lived Experience Into Advocacy

Savannah Sly is the first to admit she didn't always understand sex work. At 18, she was an art student in Boston, working part-time at a box office and, as she puts it, "broke as a joke." While looking for ways to make ends meet, she often found herself browsing Craigslist's adult ads, intrigued by the women advertising their services.

Jackie Backman ·
opinion

How to Safeguard Your Website Against CIPA Claims

There is a new wave of lawsuits targeting online businesses, including adult websites. These suits involve the California Invasion of Privacy Act (CIPA), and they are becoming increasingly prevalent. In fact, three different clients of my law firm were recently served or threatened with CIPA lawsuits — all in the same week.

Nick Zargarpour ·
trends

How Clear Talent Contracts Can Save Time and Money

The adult industry has always been defined by its ability to evolve. It embraced online distribution before much of mainstream entertainment did, pioneered subscription-based business models, and continues to evolve in areas ranging from streaming to AI.

Corey Silverstein ·
profile

Jerkmate's Lili L. on Dropping Beats to Fuel Creator Success

Long before joining the Jerkmate team as a marketing strategist, Lili L. was the kind of person who always felt like she needed a new challenge.

Women In Adult ·
opinion

What Mastercard's Specialty Fee Overhaul Means for Merchants

For business owners in the adult and specialty spaces, the rules have always been written in someone else’s office. The latest Mastercard changes are no exception, though there are practical ways merchants can begin preparing now.

Jonathan Corona ·
opinion

What to Know About Content Restrictions Across Global Markets

Throughout 2025, age verification remained a major focus as merchants worked to meet the requirements of 26 U.S. states, country-specific regulations in France, the UK, and Italy, and evolving guidance from the European Commission.

Cathy Beardsley ·
opinion

Key Strategies for Building an Effective Website Compliance Program

For adult website operators, compliance can no longer live in a folder that only opens when a bank, regulator, attorney, or payment processor starts asking questions.

Corey D. Silverstein ·
Show More