Searching over 5,500,000 cases.

Buy This Entire Record For $7.95

Download the entire decision to receive the complete text, official citation,
docket number, dissents and concurrences, and footnotes for this case.

Learn more about what you receive with purchase of this case.

Haywood v. Novartis Pharmaceuticals Corp.

United States District Court, N.D. Indiana, Hammond Division

January 16, 2018




         This matter is before the Court on the Defendant's Motion to Dismiss Plaintiff's First Amended Complaint, filed by the defendant, Novartis Pharmaceuticals Corporation, on December 27, 2016. (DE #35.) For the reasons set forth below, the motion to dismiss is GRANTED. The clerk is DIRECTED to close this case.


         Plaintiff, Michelle Haywood (“Haywood”), filed her complaint in state court on August 13, 2015. (DE #4.) The complaint brought claims for negligence, negligent training and supervision, and public disclosure of private facts; it also listed “punitive damages” as a separate count. (Id.) The defendant, Novartis Pharmaceuticals Corporation (“Novartis”), removed the matter to this Court on the basis of diversity jurisdiction on September 28, 2015. (DE #1.) On November 2, 2015, Novartis filed a motion to dismiss the complaint. (DE #14.) On September 27, 2016, the Court granted the motion, dismissed the complaint without prejudice, and granted Haywood thirty days to file an amended complaint. (DE #28.) The first amended complaint was filed by Haywood on October 25, 2016. (DE #30.) In Count one of her complaint, Haywood alleges that Novartis acted negligently when it disclosed personal information to her co-workers and supervisors via facsimile transmission which violated duties it owed to her under its privacy policy, under Indiana Code 25-26-13-15(b), and under the Health Insurance Portability and Accountability Act (“HIPPA”). In Count Two, Haywood alleges that Novartis was negligent in its training and supervision of its employees regarding the protection of customer privacy and confidentiality. Finally, in Count Three, Haywood alleges that she is entitled to punitive damages because Novartis acted with reckless indifference when it disclosed her protected information despite being told, in writing, not to do so. Novartis filed the instant motion to dismiss on December 27, 2016. (DE #35.) Haywood filed her response on January 9, 2017. (DE #37.) Novartis filed its reply on January 17, 2017. (DE #38.) The motion is ripe for adjudication.



         Novartis Patient Assistance NOW Oncology, a division of Novartis, administers the GLEEVEC Co-Pay Assistance Program (the “Program”) in which eligible patients are given a GLEEVEC Co-Pay Card by Novartis to help offset the costs of their prescription medication. (DE #30, p. 1.) Haywood applied for the Program, and on May 19, 2015, she sent Novartis a written statement requesting that no information regarding her application be sent to her place of employment. (Id. at 2.) On July 8, 2015, Novartis disclosed the following via facsimile transmission to Haywood's co-workers and supervisors: her social security number, her date of birth, her income, her Medicare number, and information about her disease, treatment, and medical providers. (Id.)

         According to the amended complaint, the website for the Program includes a privacy notice that states:

Novartis Pharmaceuticals Corporation and Novartis Group of Companies understand your personal and health information is private.
The personal information we collect from you, including your card or voucher usage, will be used to bring you information about products, programs, support, and services, to conduct market research, as required by federal regulations. Please be assured that although we share your personal information with our business partners who work with us on these activities, we do not permit them to use your personal information for their own marketing purposes. You may unsubscribe from our programs and services at any time by calling 1-888-669- 6682. For more information about our privacy practices, please visit our website at

         (“Privacy Notice”). (Id. at 3.) Additionally, the amended complaint cites to the following privacy statement[1] that was found on the main Novartis website:

. . . This Privacy Statement tells you how we protect the privacy of personal information that you may provide to us.
As part of our commitment to privacy, Novartis has voluntarily certified to the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce . . . .
The purpose of this privacy statement is to explain what Novartis does with personally identifiable information that you provide to us, such as your name, address, age, and information relating to your medical conditions. We want you to know how your personally identifiable information will be protected, who we may share it with, and for what purposes.
. . . The type of information collected from you will be based on the specific program that you register for, as indicated at the time of your registration. The information that we may ask you to provide may include your first and last name, your mailing address, your age, birth date, gender, e-mail address, and information about your medical conditions. Novartis limits the collection and processing of personal information to what is necessary to fulfill the purposes for which it is to be used.
. . . Many of our customers register for more than one Novartis program or service, through our websites, by calling Novartis, or through a third-party such as their healthcare provider. When you register with us more than once, we may combine your personally identifiable information as well as any anonymous computer information collected (see below) and store it collectively. This helps us keep track of all of your preferences in one organized place, and helps us provide information to you based on a more informed review of your requests and medical conditions of interest.
. . . We request your consent to collect your personally identifiable information when you seek to register for a Novartis program or service. In doing so, we also explain, for that program or service, what you are registering to receive and how we plan to use your personal information. We also offer you the option of discontinuing your consent (‘opting out' or ‘unsubscribing') if you later decide that you no longer want to participate in that program or receive additional information from us. If we wish to use this information for purposes incompatible from those for which the data was initially collected, we will offer an effective way to opt out of the secondary use.
. . . When you provide personally identifiable information to Novartis, it will be accessible to some of Novartis' business partners, such as companies we retain to fulfill requests for information, answer telephone calls from consumers, or provide assistance to us on specific programs or projects such as newsletters . . . . Novartis requires third-parties to whom it discloses personal data to protect personal information using substantially similar standards to those required by Novartis.
. . . Other departments within the Novartis group, and other Novartis companies that may receive your information will abide by substantially similar privacy requirements relating to your personally identifiable information.
. . . This Privacy Statement becomes effective on November 28, 2012. Novartis may update this Statement from time to time. We encourage you to review our ...

Buy This Entire Record For $7.95

Download the entire decision to receive the complete text, official citation,
docket number, dissents and concurrences, and footnotes for this case.

Learn more about what you receive with purchase of this case.