A Systems Administrator at a Medical Imaging Company Discovers Protected

A systems administrator at a medical imaging company discovers protected health information (PHI) on a general-purpose file server. Which of the following steps should the administrator take NEXT?

A) Isolate all of the PHI on its own VLAN and keep it segregated at Layer 2
B) Take an MD5 hash of the server
C) Delete all PHI from the network until the legal department is consulted
D) Consult the legal department to determine the legal requirements