How patient privacy is protected is now governed by HIPAA. HIPAA compliance continues to challenge health care organizations. What best practices can be used to ensure the privacy and security of protected personal health information (PHI)? (300 words)