Stewart, Timothy v. Rock County Human Services Department Employee(s)

**What Happened** Timothy Stewart, an employee at Rock County Human Services Department, sued his employer over a data breach. Stewart claimed the county failed to properly protect sensitive information and that this violated his rights. He argued this was a breach of contract and tried to use federal civil rights laws and healthcare privacy rules (HIPAA) to support his case. **What the Court Decided** The court dismissed Stewart's lawsuit, ruling he couldn't win based on the claims he made. The judge explained that even if the county was careless with data security, this doesn't automatically violate federal civil rights laws. The court also clarified that individual employees cannot directly sue their employers under HIPAA privacy rules. However, the court gave Stewart a chance to refile his case with different legal arguments. **What This Means for Workers** This ruling shows that employees have limited options when their employer mishandles their personal information. Workers cannot rely on HIPAA or federal civil rights laws for most data breach situations. If your employer fails to protect your personal data, you'll likely need to find other legal grounds to pursue a case, such as state privacy laws or specific contract terms about data protection.