the hospital administrator tasks you with identifying other potential risks that the hospital and the primary care physicians may need to address to protect patient records.

Your risk assessment should:

• Identify risks to both electronic and paper patient records, and recommend remedies United General can put in place to protect the records from compromise.
• Create policy statements that comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) regulations addressing access to and disclosure of electronic and paper patient records.
• Describe relevant training topics that will educate the staff on accessing and disclosing patient records.