A record opened for the wrong reason

In a fictional records exercise, an administrative worker notices that a familiar neighbour has an appointment and opens the record solely to satisfy curiosity. A colleague suggests forwarding a screenshot to a friend because both work in the same institution. The worker has technical access but no assigned task involving this person, and the packet supplies no lawful authorization for disclosure. The exercise asks the team to separate access capability from the work purpose and permitted handling of information. It does not include an actual record or authorize investigation of a real person. The appropriate reporting and incident process must be identified through the institution rather than improvised from the scenario.