How could you respond to this?

"1) As a member of the UCLA workforce, he wouldn't have been permitted to do so unless he was working with the patient. Even if he claims he didn't know accessing people's documentation was illegal, there had to been training before he completely joined. So for his attorney even quoting that, I felt as though that Zhou knew what he was doing but didn't expect to be caught or didn't know the extent of how much trouble he was going to be in. But there is a law in China CalledPersonal Information Protection Law (PIPL)which probably sparked this into effect.

2) With each person, there is a code or username that is used for anyone in medical or other organizations to capture who was doing what activity. At my job it goes my our usernames and everyone that can access the patient's chart/ needs to access the chart. There is a tab to where you can access the activities set in someone's chart whether something was cancelled or any other other changes or people who access the chart any way shape or form. I would suspect how they would've found out Zhou infractions. "