I'm certain I've had to sign an Access to Medical Records Act for my job, and I don't even read the stuff. I merely test the system that handles the information. If I'm in breach of that then I'm out on my ear, no questions ask. I'm sure the secretary would have had to sign a similar form.