I think it must be true that HIPAA doesn't apply to the Indian records, because otherwise I'm sure there would be a HIPAA complaint. Usually that would start against the professionals in the medical field that mishandled the records. Instead, this suit is about invasion of privacy and defamation. Honestly I'm surprised that she can go after them for defamation after already accepting a settlement from them. Still, these guys are obviously first-class assholes and at this point I'm not surprised anymore. Uber seems destined for the textbooks, under "how to kill a unicorn."