A stark reminder that providers of all sizes need to check audit logs on a regular basis: PHI inappropriately accessed by employee for FOUR years!