If medical records are accidentally emailed to the wrong person, the firm should immediately treat it as a potential data breach.The priority is to contain the disclosure, document what happened, preserve evidence, and correct the workflow so it does not happen again. In most cases, how the firm responds matters more than the mistake itself. […]