My personal policy is that confidentiality of the record is governed by state law, not myself. It is the patient's responsibility to restrict access to their records (to the extent allowed by law). What they tell me, I record.

John
Internal Medicine