Unauthorized use and disclosure of protected health informationControlClearly defined privacy practices with patient acknowledgement