Staffer snooped at health records of 40 patients for no reason