1. Put Someone in Charge
2. Keep Protected Health Information (PHI) Secure and Private.
3. Set up Office Policy, Procedures and Training for Your Staff.
4. Inform Patients of their Rights and Support those Rights.
5. Limit Access of Patient Information to Businesses Outside the Practice.
Hope my answer helps you.