I have handled confidential records - personnel records which include medical info - for 30 years.

Papers gets left in the copier, on the desk, in the wrong folder. File cabinets don't get locked. Some people just are nosy.

Paper or electronic - if people want to find something out they will.

Having had it both ways I see no difference in security - electronic or paper!

The only difference I do see is electronic is more likely to be legible than a scribbled paper note. And date stamped!