If you see other staff violating privacy policies you should?

Ignoring violations is never appropriate because it allows non-compliant behavior to persist and exposes both the organization and its patients to regulatory harm.

A gentle reminder alone may not satisfy the mandatory reporting obligations required by the organization's HIPAA compliance and sanctions policy.

Reporting alone without an immediate reminder misses the opportunity to stop an ongoing violation in the moment it is observed.

Both B and C. Staff have a dual responsibility when witnessing privacy violations: providing a gentle reminder can immediately halt an ongoing breach and correct inadvertent mistakes, while formal reporting ensures organizational accountability and satisfies HIPAA compliance program requirements. HIPAA mandates that covered entities maintain a culture of compliance, which requires both informal peer correction and use of official reporting channels.