So he says he was only trying to help.......
@dcontesti The golden rule: Never touch the keyboard unless you want to own the situation, keep a forensic log with date/time of actions and have been given formal permission to carry the required tasks.
Plus make sure you ask the requestor, whether they want to make a criminal investigation or charge, should the results of the review indicate there is sufficient evidence. Make sure you get a written confirmation of their decision, do not depend on a verbal one, which can be rescinded.
If you are not a court recognised forensic investigator, walk away, do not touch the keyboard and tell the requester to seek a recognised qualified forensic investigator, who can take the case to court, if they wish.
People, get fed up with this attitude, but it saves one a whole heap of trouble.
Kinda did it to himself. By contacting the office, he created a formal record requiring a formal "management" response and a resultant change in demeanor from everyone in the office.
In the US, medical privacy laws by default prohibit my dentist from even confirming that my spouse or adult child is a patient, despite the fact that we often arrive together. Even allowing the patient to see search results for their last name risks a privacy violation.
Not surprised the office is separating themselves as far as possible from the situation. After all, in addition to patient-privacy, there probably were also some disciplinary actions that can neither be confirmed nor denied.