If You Were the Privacy Officer in Your Organization, How

Essay

If you were the privacy officer in your organization, how would you address the following?
Tracking each point of access of the patient's database, including who entered the data.
Encouraging employees to report privacy and security breaches.
The healthcare professionals are using smartphones, iPads, and other mobile devices. How do you address privacy when data can literally walk out of your setting?
You observe one of the healthcare professionals using his smartphone to take pictures of a patient. He sees you and says, in front of the patient, "I am not capturing her face!" How do you respond to this situation?