Which Guideline Is Part of the Health Insurance Portability and Accountability

Which guideline is part of the Health Insurance Portability and Accountability Act (HIPAA) ?

A) Assign passwords to those who access electronic client files.
B) Obtain verbal permission from clients to send them marketing materials.
C) Store client files in an unlocked cabinet.
D) Obtain verbal consent from each client prior to treatment.