Probably worse than you can imagine
Hospitals are always so short-staffed they can't even keep their records up to date or even refile them so doctors can see their patient's records. I've temped in several hospitals for this reason. One hospital had a decades-old mainframe terminal system which required an employee's badge to be inserted to function. Very nice, right? Would tell you who accessed what and when. Well, every one of these terminals, throughout the bld had a blank badge left stuck in it at all times since doctors were always losing their badges and they didn't want to make ones for the temps. When I got bored entering location codes for files, I could look up people I knew and see what they'd been in for and when along with all their personal identification.