. . "Management also reported the incident to the BON, which opened an investigation to determine whether state or federal regulations enforceable by the BON, such as confidentiality of health records, were violated." . . .