A covered entity must adopt policies and procedures governing disclosures of PHI that identify
The scope of the Privacy Rule includes:
Conducting an accurate and thorough assessment of the potential risks and vulnerabilities to the confidentiality, integrity, and availability of electronic PHI is: