There was a violation of patient privacy at a healthcare organization when electronic medical records were inappropriately accessed. Proper training of employees on confidentiality and ethics is needed to prevent such violations. A new training program will be implemented which includes mandatory orientations, continuous training, testing, and encouraging staff to voice any concerns. The goal is to ensure all employees understand and follow policies to protect patient privacy in accordance with HIPAA.