An employee of a health care provider with access to state records viewed more “than was reasonably necessary to perform work assignments.”