State laws are specific on the access to a patients records to only those authorized to do so.
To answer your question, I would want the provider to follow the rules and procedures to prevent unauthorized access to my records. This would include proper training of all staff.