If a privacy violation is discovered...
a) regulations require the violation to be mitigated (corrected) in 30 days
b) the privacy official for the practice should be notified immediately
c) the patient may be entitled to monetary damages
d) all of the above
