It's even harder when you're hired by a customer to handle the health care data of all their customers. Sometimes you run into the conflict between serving your customer and serving their customers. Nobody can serve two masters; certain actions or disclosures are not illegal but I can't help asking myself every now and then: Do I really want to facilitate this? I do feel responsible but I have to obey the orders of my customer as long as it's legal. Still, I'm often the first one to start the discussion about these doubtful actions, wether they like it or not ...