How does a health care provider protect paper and electronically records? What are some of the common methods used?

What are your thoughts about use of the internet for medical information? Is it good for the average consumer to seek out information there?

Exactly how does a health care provider protect paper and electronically records? What are some of the common methods used? How can we be assured that PHI is released only to those we authorize.