Public Disclosure of Private Facts

Public disclosure of private facts is a privacy tort that holds a person liable for broadcasting true but private information that a reasonable person would find highly offensive and that carries no legitimate public interest. Public disclosure of private facts differs from every reputation claim because truth is no defense, since the harm comes from the exposure itself. The publication of private facts has to reach a wide audience, so a single confidence shared with one friend rarely qualifies. California recognizes the claim, and a California invasion of privacy lawyer tests it by asking whether the fact was genuinely private, how far the disclosure traveled, and whether the public had any real stake in knowing.

What is Public Disclosure of Private Facts?

Public disclosure of private facts is the act of publicizing someone’s private information without consent in a way a reasonable person in that person’s position would consider highly offensive. Public disclosure of private facts requires that the information be truly private, so a fact the plaintiff already broadcast cannot support the claim. The privacy requirement is why California courts examine where the information came from before they examine how it was spread.

Moreno v. Hanford Sentinel, Inc. (2009) 172 Cal.App.4th 1125 shows that limit working. A student posted a harsh account of her hometown on her own social media page, and a local newspaper reprinted it. The court held there was no private fact left to disclose, because she had already published it herself. Moreno further confirmed that the right of privacy is purely personal, meaning only the person exposed can bring the claim.

Publicity means broad dissemination. Restatement Second of Torts, section 652D treats a matter as publicized when it is communicated to the public at large, or to so many people that it is substantially certain to become public knowledge. Ignat v. Yum! Brands, Inc. (2013) 214 Cal.App.4th 808 removed any requirement that the disclosure be written, holding that spoken disclosure can damage privacy just as widely as a printed one.

Why is Public Disclosure of Private Facts Considered a Privacy Tort?

Public disclosure of private facts is a privacy tort because it protects dignity and confidentiality rather than reputation, which no defamation claim can reach. Public disclosure of private facts assumes the information is accurate, so the injury is the loss of control over who knows it. The dignity interest explains why a plaintiff can recover for embarrassment, anxiety, and social withdrawal without proving a single false word was published.

California protects that interest on two tracks. Privacy sits in California tort law alongside negligence and contract claims, and article I section 1 of the California Constitution lists privacy among the state’s inalienable rights. Catsouras v. Department of California Highway Patrol (2010) 181 Cal.App.4th 856 shows the harm the tort addresses. Dispatchers there circulated photographs from a fatal crash scene, and the court described morbid and sensational prying as serving no legitimate public interest.

Is Public Disclosure of Private Facts a Type of Invasion of Privacy?

Yes, public disclosure of private facts is one of the four main invasion of privacy torts. Public disclosure of private facts addresses what was published, while intrusion upon seclusion addresses how information was obtained. Courts separate the two branches of invasion of privacy because a defendant can gather private material lawfully and still face liability for spreading it. Hill v. National Collegiate Athletic Assn. (1994) 7 Cal.4th 1 confirmed that California common law follows Dean Prosser’s four part classification. Appropriation of name or likeness and false light complete the set.

What are the Elements of Public Disclosure of Private Facts?

The public disclosure of private facts elements are public disclosure, of a private fact, that would be offensive and objectionable to a reasonable person, and that is not of legitimate public concern. Moreno v. Hanford Sentinel, Inc. (2009) 172 Cal.App.4th 1125 states the four part test and holds that the absence of any single element is a complete bar to liability. The four elements below are what a California plaintiff has to establish.

1. Public disclosure means the information reached the public at large, or enough people that it was substantially certain to become public knowledge.
2. Private fact means the information was not already in the public domain and not something the plaintiff had made available.
3. Offensiveness means a reasonable person in the plaintiff’s position would find the publicity highly offensive rather than merely unwelcome.
4. Lack of legitimate public concern means the material had no newsworthy value and no substantial connection to any newsworthy subject.

Every element has to hold at once, and the fourth defeats the most claims. CACI No. 1801, the pattern jury instruction, adds two findings California juries make on top of those four. The defendant must have known, or acted in reckless disregard, of how offensive the publicity would be, and the disclosure must have caused real harm.

Newsworthiness carries its own test. Briscoe v. Reader’s Digest Assn., Inc. (1971) 4 Cal.3d 529 weighed the social value of the facts published, the depth of the intrusion into private affairs, and how far the plaintiff had voluntarily accepted public notoriety.

What are Examples of Public Disclosure of Private Facts?

Examples of public disclosure of private facts share one feature, which is a true and sensitive fact pushed out to an audience that had no business receiving it. A public disclosure of private facts example almost always involves health, sexuality, finances, family history, or criminal past. The public disclosure examples below cover the categories California courts see most often.

1. Medical records published or circulated to coworkers, a school community, or an online audience.
2. Financial details such as debts, bankruptcy history, or tax problems posted publicly.
3. Private messages or intimate photographs forwarded to a group or uploaded to a website.
4. Sexual orientation or gender identity disclosed to a wide audience without the person’s consent.
5. Criminal history revisited long after the fact where no current public interest exists.
6. Family and personal history including adoption, immigration status, or a relative’s illness.

Sexual orientation produced two California decisions pointing opposite directions. Diaz v. Oakland Tribune (1983) 139 Cal.App.3d 118 upheld a claim where a columnist disclosed a community college student body president’s gender history, while Sipple v. Chronicle Publishing Co. (1984) 154 Cal.App.3d 1040 rejected a claim because the plaintiff’s sexual orientation was already known in his community and connected to a newsworthy event.

The distinction is availability, not sensitivity. Diaz noted that matter already in the public domain is generally not private, while adding that once public record material can still be protected where its disclosure carries no newsworthiness value.

Are Sharing Medical Information without Consent considered Public Disclosure of Private Facts?

Sharing medical information without consent can be both a public disclosure of private facts and a statutory violation, and the two theories usually travel together. Medical information is the clearest category of private fact, so the analysis normally turns on how many people received it. Sharing that information with a small circle may still be a breach of confidentiality even when the audience is too narrow for the privacy tort, which is why plaintiffs plead both. Ignat v. Yum! Brands, Inc. (2013) 214 Cal.App.4th 808 involved a supervisor telling coworkers about an employee’s bipolar disorder, and the court held that an oral disclosure can support the tort.

California adds a statute with real teeth. The Confidentiality of Medical Information Act at Civil Code section 56 and following restricts how providers, health plans, contractors, and employers handle medical information. Civil Code section 56.36(b) lets a patient recover nominal damages of $1,000 for a negligent release without proving any actual loss, plus actual damages. Section 56.36(a) makes a violation causing economic loss or personal injury a misdemeanor. HIPAA offers no private right to sue, so the state statute is the route to a personal remedy.

Is it Illegal to Post Someone’s Address Online?

Posting someone’s address online is illegal in California when it is done to place that person in fear or to invite harassment. Posting a home address with no such purpose is not automatically a crime, since addresses often appear in public records. The dividing line is intent, and California now supplies both a criminal and a civil route once that intent exists.

Penal Code section 653.2 makes it a misdemeanor to distribute identifying information electronically to cause harassment, punishable by up to one year in county jail, a fine up to $1,000, or both. Civil Code section 1708.89, the Doxing Victims Recourse Act, took effect on January 1, 2025 and created a private cause of action against a person who doxes another. A prevailing plaintiff may recover economic and noneconomic damages, statutory damages between $1,500 and $30,000 without proving out of pocket loss, punitive damages, and attorney’s fees. Government Code section 6254.21 adds separate protection for the home addresses of judges, prosecutors, peace officers, and other public safety officials.

How to Press Charges for Invasion of Privacy?

Pressing charges for invasion of privacy is not usually possible, because the privacy torts are civil claims that a person files rather than crimes a prosecutor charges. Invasion of privacy in its four common law forms produces a lawsuit for money damages, not an arrest. The prosecution route opens only where the same conduct also violates a criminal statute.

Two separate paths therefore exist. A person can report conduct that violates a criminal statute to local police or the district attorney, who decide independently whether to file. A person can separately file a civil complaint in the superior court for the county where the defendant lives or where the harm occurred. Neither path controls the other, so a declined criminal referral does not end the civil claim.

Timing governs both. Code of Civil Procedure section 335.1 gives a public disclosure plaintiff two years, and California courts have treated the period as running from discovery of the disclosure rather than from the date of publication. A privacy attorney in California therefore starts with the calendar before anything else.

What Happens if Someone Discloses Private Facts?

Someone who discloses private facts faces a civil action for damages and, where the material is still online, a request for injunctive relief. Disclosure of private facts can produce general damages for emotional harm, special damages for lost income or medical treatment, and punitive damages where the conduct was malicious. The remedies depend on proof of injury, since CACI No. 1801 requires harm and causation as separate findings.

Defendants have real defenses. Truth is irrelevant, but consent, prior public availability, and newsworthiness each defeat the claim outright. A disclosure connected to speech on a public issue may draw a special motion to strike under Code of Civil Procedure section 425.16.

Can you sue Someone for Sharing Private Messages?

Yes, you can sue someone for sharing private messages when the messages contained private facts and the sharing reached a wide audience. Private messages forwarded to one person or a handful of friends usually fail the publicity element, which asks whether the material became public knowledge. Messages posted to a public account, a group chat with hundreds of members, or a website can clear that bar. Moreno cuts the other way where the sender had already made the content public, since a fact the plaintiff published cannot be reclaimed as private.

Can you sue Someone for Telling Your Personal Business?

Suing someone for telling your personal business is difficult, because gossip within a small circle rarely satisfies the publicity element. Telling your personal business to a few coworkers or relatives falls short of communication to the public at large. Ignat v. Yum! Brands, Inc. (2013) 214 Cal.App.4th 808 confirmed that spoken disclosure counts, so the obstacle is the size of the audience rather than the form of the telling. A workplace announcement, a mass email, or a community meeting may reach far enough where a private conversation does not.

Can you sue a Company for Selling Your Information?

Suing a company for selling your information is generally not available under California privacy law, because the consumer statute reserves most enforcement to regulators. The California Consumer Privacy Act at Civil Code section 1798.100 and following gives consumers a right to opt out of the sale or sharing of personal information, enforced by the Attorney General and the California Privacy Protection Agency. Civil Code section 1798.150 supplies the one private cause of action, limited to unencrypted personal information exposed through a business’s failure to maintain reasonable security. Statutory damages there run from $100 to $750 per consumer per incident. A common law disclosure claim remains possible where a company published a specific sensitive fact rather than sold a data set.

Can you sue a Company for Breach of Privacy?

Yes, you can sue a company for a privacy violation, though breach of privacy is a plain English label rather than a California cause of action. A claim described as breach of privacy has to be pleaded as something specific, whether public disclosure of private facts, intrusion upon seclusion, a constitutional privacy claim under article I section 1, or a statutory claim. The label matters because each theory carries different elements, different defenses, and different deadlines. A privacy attorney in California usually pleads more than one of them together and lets discovery show which one fits the evidence.

How to Avoid Public Disclosure Violations?

Avoiding a public disclosure violation comes down to asking who needs the information and stopping there. Avoiding the claim is straightforward once consent and audience size become deliberate choices rather than afterthoughts. The six steps below reduce exposure under California privacy law.

1. Get written consent before publishing anyone’s health, financial, or family information.
2. Limit the audience to the people with an actual need to know, and keep sensitive facts out of group channels.
3. Separate the personal from the operational when explaining a departure, an absence, or a policy change.
4. Verify public availability before treating a fact as public, since a stale court record can still be protected.
5. Secure the records holding medical, payroll, and personnel information.
6. Remove content on request when a subject reports that a disclosure exposed something private.

Limiting the audience prevents the most claims, because the publicity element is the one a plaintiff most often cannot prove.

Are there Criminal Penalties for Public Disclosure of Private Facts?

No, California imposes no criminal penalty for the tort of public disclosure of private facts, which is tried as a civil claim in superior court. Criminal liability attaches only where a separate statute covers the same conduct. Whether a disclosure becomes a criminal offense depends on what was published and why. Three statutes reach the conduct most often mistaken for the tort itself.

Civil Code section 56.36(a) makes a medical information violation causing economic loss or personal injury a misdemeanor. Penal Code section 653.2 covers harassing electronic distribution of identifying information, and Penal Code section 647(j)(4) covers distributing intimate images without consent. A criminal filing never replaces the injured person’s separate civil claim.

What should I do if my Private Information is Exposed?

A person whose private information was exposed should capture the evidence before it disappears and act well inside the two year deadline. Exposed information spreads and then vanishes, since posts get deleted, accounts get closed, and screenshots become the only record. The six steps below protect a California disclosure claim.

1. Screenshot everything including the post, the account name, the timestamp, and any visible engagement counts.
2. Record the reach by noting follower counts, view counts, shares, and where else the material appeared.
3. Request removal in writing from the person who published it and from the platform hosting it.
4. Report criminal conduct to local police where a statute such as Penal Code section 653.2 or 647(j)(4) may apply.
5. Notify the institution if a provider, school, or employer released the information, since a statutory claim may apply.
6. Contact a California privacy attorney before the limitations period runs.

Recording the reach is the step people skip and later need most, because the publicity element turns on how many people saw the material rather than on how upset the plaintiff was.

Can a Personal Injury Attorney Handle Public Disclosure of Private Facts Cases?

Yes, some personal injury attorneys handle public disclosure of private facts cases, because California treats the claim as an injury to the person. The classification puts the claim under the same two year limitations statute and the same emotional distress damages framework a personal injury practice proves routinely. A personal injury attorney with real privacy litigation experience can also weigh the newsworthiness defense, the anti-SLAPP risk, and whether a medical information or doxing statute adds statutory damages to the common law count. Those questions decide cases early and sit outside the ordinary collision and premises caseload, so asking a firm how many privacy matters it has litigated is worthwhile. A free case review is the usual starting point for a California disclosure claim.