Select the best answer: the office for civil rights (ocr) discovers that a facility is not allowing anyone but staff to access protected health information (phi). they do not allow people to access their own phi. which common compliance issue is this?
