Hacker News Reader

As someone else mentioned, yes he does need to be able to access that data should a specific need arise.

That said, personal health records at an insurance provider are not the same thing as classified information within the DOD. The DOD classifies lots of operational details in order to protect its operations. Unit locations, security procedures, budgets, even the existence and personnel rosters of certain locations. Do you think Mark Bertolini could run Aetna without access to its complete budget, employee rolls, locations, and functional areas?

No, but he does need to know that his company processes your health claims. The existence of many intel programs is a secret.

If something exceptional happens, yes, a subordinate needs to be able to raise the issue up the chain and say, "What do I do?"