A patient filed a privacy complaint with the physician office where you work.  She says that her former sister-in-law, who works there, told her x-husband that she was being treated for depression.  Now he has taken her to court to challenge her custody of their children.

1. How would you investigate if this was a paper record?

2. How would you investigate if this was an electronic health record?

3. If you found evidence that the former sister-in-law did violate the privacy of the patient, what would you do?

If you found no evidence of any wrongdoing, what would you do?