The benefit of document scanning to area businesses, hospitals, clinics, law firms and governmental agencies depends on the understanding of how to assign only those who are responsible with the access to the files. Where as in many cases, the entire office, outside contractors, custodians, etc had access to the paper files.
The pure number of people who have access to any given office leads to a similar number of people who are not authorized, but have access purely because the have access to the office.
For example, if the office is cleaned, the cleaning people have access to the files. Granted, file rooms can be off-limits to the cleaning staff. However, records that have been checked out, may be available to be compromised by virtue of not being protected by the person who checked out the files. If there is a special employee who is responsible for retrieving requested files, that person consequently has access to the confidential records