Scenario: The IT department has just notified you of a computer security violation. During their database audit, they found a nurse employee who had accessed her own electronic medical record 27 times the past 3 months to review her labs and dictations for her chronic condition. Sometimes she accessed the record herself, and sometimes she had other subordinate co-workers access her record.

The facility has strict rules concerning computer security violations. Administration wants her and any employee who assisted her terminated immediately. The nurse involved argues that it is not a violation: because she only accessed her own records, and since she owns her medical records she did not violate any security rules.

1. Respond to the following question: Has the nurse violated any security rules? Be specific. Then determine if the employee and/or her subordinate should be terminated. Defend your response.