If there is a security breach at a health care institution, they are required to
0discontinue the use of the security plan
O notify the patient.
O pay damages
O report the individual responsible