you respect the law. The problem is that in the name of "Jehovah", many JWs will violate the law
And that is why there are Health Information Privacy and Security Officers.
I was one in the past. I set up triggers when a person looks at an account with their same last name, same address, same phone #, is listed as next of kin, or is flagged as a VIP. I would investigate each one. I fired somebody for altering her daughter's financial info, for example, less than 24 hours after she did it.
I also did audits when a patient was the subject of media coverage--there would be a rash of people who suddenly had to look up that particular individual, though they were not currently involved in the case. They got disciplinary action.
I audited when a patient had something "interesting" going on that would spark snooping.
These are pretty standard safeguards in the US, which I'm sure StarTrekAngel knows all about. Dubbies can't get away with it as easily when there is an electronic medical record.