You have been appointed as the new Disability Care Manager of Banksia Care. Over the past month, you find out that an administrative worker at your facility has been accessing a client's medical records to find out about treatment and progress. You have received a complaint about staff accessing client details and reading through case notes. You launch an internal investigation, and it has been reported that the employee Kirsten who accessed the records is a family friend of the client and did this as she wanted to be able to speak with the client's family about his progress and give the family regular up-dates on his service's needs. Following the investigation, when questioned Kirsten said that she was not aware that this was a breach in client confidentiality and disclosure, and she had not received a copy of these policies when she commenced employment nor has, she had any formal training on privacy and confidentiality Review current policy and procedure in line with the breach that has occurred in this scenario