Watchdog wants assurances from 200 execs that employees aren't poking around patient files they have no business viewing