An engineer working as a computer programmer plays a minor role in developing a computer system for a state department of health. The system stores medical information on state employees, identified by name. Through no fault of the programmer, few controls are placed on the system to limit easy access by unauthorized people. When the engineer learns of this, he first informs his supervisor and then higher management. All refuse to do anything about the situation because of the expense required to correct it. In violation of the rules for using the system, the engineer easily obtains a copy of his own medical records. He sends them to his state legislator as evidence for his claims that the right of citizens to confidentiality regarding such information. Answer the following questions. Use NSPE code of Ethics and justify your answer. Questions: Does the engineers action constitute a breach of confidentiality? Is his behavior proper? What, if any, action against the engineer would be appropriate?