All of the Following Are Privacy Activities in a Medical

All of the following are privacy activities in a medical office that would comply with the law EXCEPT:

A) providing a copy of the office privacy policy informing patients of their privacy rights and how their information may be used.
B) training employees to understand privacy procedures.
C) having individually identifiable patient information available to all hospital employees.
D) adopting clear privacy procedures.
E) asking patients to acknowledge receiving a copy of the office privacy policy.