It seems that UCLA Medical Center had a serial HIPAA violator on its payroll (until he or she was fired last year for checking out Britney Spears' medical record). See: More UCLA records abuses - Los Angeles Times. We knew this was wrong even before HIPAA, didn't we?