the hipaa privacy and security rules dictate that all who may come into contact with protected health information go through training on hipaa policy.