administrative safeguards help covered entities (ces) know when they can share protected health information (phi). what is a safeguard that a ce may use?