Some time ago I used to work at a hospital. When my family members would receive treatment at this place, often times they would ask me if I could look up information for them regarding their health. I always had to tell them that privacy laws did not allow me to bypass the hospital's administration. If they needed information, even if they were entitled to it, they needed to go or call the place. I was in IT and I could not do this for them ( I did have access to the data). In one occasion, the said patient was my own kid. After getting some blood work done, I was anxious to know the results. I walked over to the lab and ID'd myself as the parent. They lab refused to give me the results because the doctor had not reviewed them yet. All I had to do was walk over to my office and pulled them up in my computer. Yet, technically I was not allowed to do this and if caught I could get fired.
My question then is, how does the HLC force themselves into hospitals and begin to get involved in the health matters of witnesses? I know the patient may allow a third party to be involved but I read somewhere that witnesses are wary of even taking blood in secret, for fear that the HLC may find out.