A physician has used the hospital EMR (electronic medical record) to check labs on a patient.  As this area is only used by health care providers, most physicians do not routinely log off. Is this a violation of the HIPAA Privacy Rule?