Respuesta :

A hospital employee who obtains PHI (protected health information) without authorization may be criminally liable for the violation of patient privacy.