You’ve taken every appropriate step to secure protected health information (PHI) at your medical practice, [...]