My husband and I work at the same hospital. He comes to the department that I work in for treatment although I am not directly a part of his care. I frequently check his electronic medical record for results as well as go to all of his apts. With him. I have his permission to do so but this is not in writing. Am I violating hipaa law?