It's a pretty strong argument for #MyHealthRecord actually. Under current legislation, she's going to have to take them to court, prove they violated the Privacy Act, and sue
If they'd violated her MHR, she would have much better recourse to pursue them legallyhttps://twitter.com/dmeeze/status/1023694430849490944 …
Definitely an issue, but with MHR it would be easily auditable. The ADHA has detailed records on access. With hospital/state systems, it's going to be a nightmare to find out who accessed what