Electronic medical records taken by someone who does not have legal custody could be extremely wrong, illegal and possibly violate applicable state HIPAA laws. At the end of the day, it is not a simple answer to determine if the electronic medical records belong to the clinic or an individual physician but generally speaking if the physician is using the data for medical purposes as she is treating the patient then I see no issue. This may be different if she is attempting to use the information to send patients information on the creation of her own practice for example.