HIPAA law holds everyone who has access to the data accountable. A single violation can be punished by up to 50k in fines and prison time. If multiple records were accessed improperly you can see absolutely outrageous fines and this has happened! It’s perhaps one of the few areas in government that is taken seriously and there’s a lot of tech jobs in security in healthcare because of it.