The new compliance officer at Any Old Clinic learned that last month, Any Old Clinic hired five new people, entered into an agreement with Rainy Cloud to provide data storage services and a breach occurred affecting 450 patients. Please name any and all privacy / security concerns and what should be done to address them.