A patient has filed a privacy complaint with the physician office where you work. She says that her former sister-in-law, who works there, told her ex-husband that she was being treated for depression. Now he has taken her to court to challenge her custody of their children.

1. How would you investigate if this was a paper record?
2. How would you investigate, if this was an electronic health record?
3. If you found evidence that the ex-sister-in-law did violate the privacy of the patient, what would you do?
4. If you found no evidence of any wrongdoings, what would you do?