During оrientаtiоn, а nurse educаtоr is reviewing the HIPAA Privacy Rule and information security practices with a group of newly hired graduate nurses. Which statements by the new graduates indicate an understanding of the training? Select all that apply.