Select the Correct Statement Regarding the Requirements of HIPAA Regulations

Select the correct statement regarding the requirements of HIPAA regulations.

A) A covered entity must have and apply sanction against members of its workforce who fail to comply with the privacy policies and procedures of the covered entity.
B) A covered entity does not need to train all members of its workforce whose functions are affected by a change in policy or procedure.
C) A covered entity must designate, and document, a privacy officer, and a HIPAA compliance officer,
D) A covered entity may require individuals to waive their rights.
E) A covered entity must require the individual to sign the Notice of Privacy Practices prior to delivering any treatment related service.