You have been appointed as the new Disability Care Manager of Banksia Care. Over the past month, you find out that an administrative worker at your facility has been accessing a client's medical records to find out about treatment and progress. You have received a complaint about staff accessing client details and reading through case notes. You launch an internal investigation, and it has been reported that the employee Kirsten who accessed the records is a family friend of the client and did this as she wanted to be able to speak with the client's family about his progress and give the family regular up-dates on his service's needs. Following the investigation, when questioned Kirsten said that she was not aware that this was a breach in client confidentiality and disclosure, and she had not received a copy of these policies when she commenced employment nor has, she had any formal training on privacy and confidentiality