Those records are protected by HIPAA which requires they be encrypted, and epic logs anytime a person views patient information.