Isn't "resigning" or being terminated usually the end of the ordeal for _no need to know_ type of HIPAA violation? Shouldn't they get a second chance to do the right thing next time? Invasion of privacy is serious, but temptation or curiosity, or fe...