Help Me With Hipaa

Can a doctor have Alexa in OR to play music?   Is it a HIPAA violation for staff to look at their own records or is it an internal policy violation? I am a small company BA do I really have to do all of HIPAA compliance requirements? If I know my upstream BA or CE isn't following their HIPAA compliance obligations what am I legally obligated to do? Why would you make daily copies of your visitor logs? More info at HelpMeWithHIPAA.com/117