How do you handle colleagues mistakes?

[eddy]

For normal mistakes just the colleague.

The example you gave that has larger implications, I would go to the boss. I view it as a systematic issue and something that could get the company in trouble. Also it has happened more than once. 

[simpsongal]

I probably tell the employee directly, and forward the exchange to the supervisor as an FYI. That way the supervisor is aware but it doesn't look like you're unnecessarily elevating a somewhat rare mistake.

As a manager, I would find a way to bring it up in a group setting (maybe later in time) and not tell the employee.

[litskispeciality]

In general I can't stand colleagues who aren't my boss, even if they have a higher title, running to the boss to complain or tattle on everything I do. My mental health is so much better working in a job where it's not a federal offense, literally shared with the entire team as a "learning opportunity" or an on-going story for years, of something I did wrong. In general I think it's ok to talk to the colleague themselves. If there's a bigger concern you could always talk to their manager in more general terms "hey are we still doing xyz this way?" so it doesn't call out the one person.

*ETA in my experience a rather minor mistake, one-off or misunderstanding because people don't listen became a message to the entire team on Teams, or brought up in a meeting right away. If I made a privacy mistake for instance then the whole team has to be re-trained to make sure no one else makes the mistake.

In OP's case I would bring it up to the manager as it sounds like it could be a major privacy violation that not only could get the company/practice in a lot of trouble, but it sounds like something the employee knows they shouldn't do. Trust me I get that mistakes happen, see above I make them all the time, but privacy is a big deal. In my past experience I've been forthcoming with my manager about the mistake and how I attempted to correct as soon as I notice.

I received an entire packet of notes for a different patient at my dad's Geri Psych. I tried to report it but got the person who printed and mailed it to the wrong person on the phone, and I know it was never reported further. I didn't have the time to escalate up the chain, but I worry where my dad's records have gone (in error).

[osulori]

Are these mistakes like the person misspelled the recipient's name in an email or message so it autofilled in a similar name of someone else in the organization, or more like the person didn't realize the information needed to go to X person instead of Y person? Has it been addressed with the person in the past?

(Sorry if I missed any of this in previous posts)