Education programs and security measures should be considered essential for protecting () and () while improving appropriate access to personal patient information.