I'm Doug, and I'm sorry to hear of the confusion. My goal is to provide you with excellent service today.
HIPAA as it effected medical records, primarily related to electronic copies of those records and transfer of those records. For the most part, there is little control over hard copy/paper files.
The U.S. Office of Civil Rights (OCR) stated that HIPAA Covered Entities are required to "make reasonable efforts to limit access to PHI to those in the workforce who need access based on their roles." In addition, the OCR states that Covered Entities should take "reasonable precautions to prevent inadvertent or unnecessary disclosures."
HIPAA essentially requires only that the files be protected by locking file cabinets. Qualifying procedures include actions "such as isolating and locking file cabinets or record rooms, or providing additional security, such as passwords on computers maintaining personal information."
While a locked car trunk is certainly not ideal, the fact that medical records are stored overnight in a locked car trunk does not automatically qualify as a violation of HIPAA regulations.
You may reply back to me using the Reply link and I will be happy to continue to assist you until I am able to address your concerns, to your satisfaction.
Kindly, remember to rate my service to you. That is how I am credited for assisting you.
I wish you and yours the best this holiday season,