One example. A friend of mine who works at a hospital told me about a colleague (a nurse) who looked up her own test results since she was anxious and could not wait using her login to the main system (for providers). She got flagged in the system and reprimanded. Every access is logged.

You need to be part of a patient’s care team, using that data to further their care. Any other access is a violation.

Med students get a little grey area on this because their job is to absorb as much info as possible without necessarily providing care, but even they shouldn’t venture outside the census of their supervising physician.