My friend of 20+ years told me the other night that she accessed her daughters medical records. She knew about an appointment at a&e her daughter had and the details -treatment / advice etc, purely through her job, not via daughter. For context, my friend works for the NHS in an admin role, daughter is 20 and has had many medical issues over the last decade or so. I'm so uncomfortable with this, it's not okay and I just don't know where to go.... my friend is amazing at her job, and just deeply cares about her daughter and yet I feel a pit of unease..... just need some advice where I can chat back and forth. I have a horrible feeling that she has searched her friends / family in the medical databases, and if I was to put in a SAR they would be flagged. I genuinely love her as a friend but I'm struggling with this. If I put the SAR it is likely they will audit her activity and she will lose her job, I don't want that, but I also want her to accept that she needs to follow the very clear rules