Thirty four charges have been laid under the health information act, along with another six under the criminal code against one person.
Allegations range from improperly accessing other people's health information, inappropriately using and disclosing that information, and falsifying a record.
The case came to light after a reported breach to the Office of the Privacy Commissioner.
The maximum penalty for the offences under the Health Information Act is $50,000 for each charge, while the charges under the criminal code could result in jail time.