A health services administrator discovers that a custody officer has been reading patient medical records without authorization. The FIRST action should be:
-
A
Immediately terminate the officer's employment
-
B
Report the breach to the privacy officer and initiate a formal HIPAA breach assessment
-
C
Warn the officer verbally and monitor for repeat occurrences
-
D
Notify all affected patients by certified mail within 24 hours