Under HIPAA, a covered entity's sanctions policy must apply to which workforce members?
-
A
Only supervisors and managers
-
B
Only employees with access to electronic PHI
-
C
Any workforce member who violates privacy or security policies
-
D
Only employees who have been previously warned