Failing to protect medical records should be a criminal matter, and criminal negligence seems a common enough term I assume that it is real rather than a made u

Failing to protect medical records should be a criminal matter, and criminal negligence seems a common enough term I assume that it is real rather than a made up cop drama term. Also the traditional justification for ludicrous compensation for CEOs etc is how much more risk and responsibility they have, and this seems to be the CEO baring (minimal) responsibility for the company’s actions.