Which of the following is NOT an administrative requirement of HIPAA? Designating a contact person to distribute information and investigate complaints Training the workforce, including paid employees, trainees and volunteers, on privacy policies and procedures Maintaining three hard copies of all health records in different locations to prevent accidental loss due to fire or theft Developing procedures for individuals to file complaints about compliance