How will employees in the medical office have to be trained regarding privacy(for example,who is resposible for training and record keeping)?What is required if an employee doesn't follow the privacy policy?When must employees be trained? In what matter?
What does your text or other classroom resource say?
(IMO, for that second question, that employee would need to be fired. But that's just me!)