It is a good idea to train all workforce members on subjects such as permissible uses and disclosures of Protected Health Information, the minimum necessary standard, and the difference between patient consent and patient authorization. It may also be helpful to explain the background to the Privacy and Security Rules and what their objectives are.