We have a past employee that has patient files and billing info on our server. She worked part time for an outside doctor and his info is contained on our records. We have purged them and notified the docotr, but she intercepts emails. Do we have a violation that we should be concerned about?

The other doctor's patient information was contained on your server? Doesn't appear to be a HIPPA violation on your part, but it may be on the part of the other doctor.