Doe v. Dynamic Physical Therapy, LLC

On December 8, 2025, a federal civil complaint was filed in the United States District Court for the Middle District of Alabama. Plaintiff John Doe, a patient at Dynamic Physical Therapy, LLC, alleged that during rehabilitation sessions, his personal electronic health records were accessed and shared without consent, revealing sensitive medical data to unauthorized third parties. Simultaneously, the lawsuit claimed that a licensed physical therapist employed by the clinic repeatedly engaged in unnecessary and inappropriate physical touching, constituting medical battery. The dual claims painted a picture of systemic failures in both digital privacy safeguards and professional boundary enforcement. The filing triggered parallel federal investigations by the Office for Civil Rights regarding HIPAA compliance and by local authorities reviewing criminal assault allegations, drawing significant media attention to the vulnerability of patients in outpatient therapy settings.

Following intense discovery, the parties entered confidential mediation. The case was resolved via a multi-million dollar settlement agreement in mid-2026, with no formal admission of liability from the defendants but requiring the clinic to submit to a five-year external auditing program.

The central dispute revolves around whether Dynamic Physical Therapy, LLC fulfilled its statutory duties under HIPAA to protect patient data, and whether the physical therapist's actions deviated from the accepted standard of care, crossing the line into intentional battery, and if the clinic is vicariously liable for such misconduct.

The lawsuit sent shockwaves through the outpatient therapy industry, catalyzing sweeping reforms in electronic health record access management across corporate chains. It spurred national advocacy groups to demand mandatory informed consent protocols for manual therapy techniques, explicitly defining clinical versus non-clinical touch. Numerous states introduced legislation requiring physical therapy clinics to install surveillance cameras in treatment areas and to conduct mandatory annual training on professional boundaries and digital privacy for all staff.