HIPAA requires a covered entity to do the following: Group of answer choices Provide information to patients and health plan members about their privacy rights and how their information can be used Use and disclose personal health information how they see fit to conduct business Train workforce members so they understand the organization's privacy an security policies, procedures and practices Provide information to patients and health plan members about their privacy rights and how their information can be used; Train workforce members so they understand the organization's privacy an security policies, procedures and practices Use and disclose personal health information how they see fit to conduct business; Train workforce members so they understand the organization's privacy an security policies, procedures and practices