Read the hospital policy excerpt.
According to this policy, which of the following actions is a permissible way to handle patient records?
**Policy Excerpt:** 'All patient-identifiable information (PII), whether in paper or electronic format, must be secured when unattended.
Paper records must be stored in locked cabinets or rooms.
Electronic records must be accessed only via password-protected terminals, and staff must log out at the end of their session.
Under no circumstances should PII be discussed in public areas such as cafeterias or elevators.'
