Given the terms of the policy, the insurer has no duty to defend a physician who allegedly improperly accessed medical records, since the records were not acquired in the course of professional treatment.
http://media.ca1.uscourts.gov/pdf.opinions/17-1872P-01A.pdf