Why would the records be in a database in the first place? That seems like such a sensitive type of info, at least don't attach real names to them geeZ.
I was wondring too what’s the need of overdigiting everything in psychiatry. Sure, stuff becomes searchable and is easy to archive but the the risks don’t compare with locked down file cabinets.
Therapists exist in a society where everything is digitized so they don't even think twice about digitizing these records. They aren't tech workers, much less security experts, so they really do this without a second thought.