- Limit Access: Only access PHI necessary for patient care. - Secure Storage: Keep physical and electronic records secure, using locks and passwords. - Dispose Properly: Shred paper records and use secure methods to destroy electronic records when no longer needed. - Report Incidents: Immediately report any suspected breaches or security incidents to the appropriate authorities.