We didn't see the entire document, so it is hard to judge specifics. However, the phrase "imagine yourself" to be a security contractor, and the section about reporting "dates and times of investigations (AKA break ins), examples of data collected, evaluation data" are of concern.

OK, student A says, "Cool, I now a 1337 hax0r, and I'll see what the local doctor's office has for security." He gets his imaginary permission and goes at it. Collects private data from a system with a vulnerability.

Can you say, "Joliet Jake?"