I see. I think I misinterpreted the "0 legal requirements" part of your comment. It gave me the impression employees not involved in the care could access medical data. Thanks for clarifying.