Which of the following practices is showing HIPAA compliance?
A. storing patients' nutritional assessments on an unencrypted business laptop
B. reporting an unencrypted laptop stolen that contains patients' nutritional assessments
C. taking a photo of a patient's tattoo on a personal device
D. Establishing written policies for how one will use, share, store, and discard any material with PHI
