Almost certainly saving the image was a violation of hipaa policy— giving emr records without the proper logging/etc can get the doc fired. The patient had a right to their images, but it’s like anything enterprise, getting it has to go through the proper channels.

You can probably imagine the privacy problems if that image were saved out of the cache directory.

I don’t think criticizing doctors for not knowing you can right click save image as makes any sense because it’s not an important part of their work.