Which of the following is a fundamental principle of hipaa privacy & security rules as it applies to Certified Medical Transcription?