146 PART 2 | Laws Influencing Information Security government programs such as Medicaid or Medicare. It's also shared with insurance companies. Insurance companies sometimes ask for health insurance records to make decisions about whether a person is a suitable risk for life or health insurance. These records are shared in court cases, particularly if a plaintiff claims an injury in a lawsuit. They are used to prove that a defendant caused the plaintiff 's injury and is liable for that injury. People can do very little to mitigate an improper disclosure of their health information. They may feel a social stigma if certain facts are shared indiscriminately or exposed in a data breach. There are few ways to correct that stigma. For instance, people recovering from substance abuse might not want other people to know. They may be concerned that society will judge them unfairly for their past substance abuse. They may be concerned about being denied employment or other opportunities. They may worry that they could be prosecuted for using illegal substances. No amount of money or fines assessed against a provider who improperly discloses this information can compensate a patient for such embarrassment or fear. People can't be instructed to "forget" this type of information once they hear it. The federal government recognizes that health information is highly sensitive. The Health Insurance Portability and Accountability Act is the most well-known U.S. law protecting the security and privacy of health information.