An athletic director discovers that coaches are storing athlete medical records in personal cloud accounts. What is the most urgent corrective action?
-
A
Allow the practice to continue since cloud storage is generally secure
-
B
Mandate use of a FERPA- and HIPAA-compliant institutional system and revoke personal storage use
-
C
Have coaches email records to the athletic trainer instead
-
D
Post a memo asking coaches to use better passwords