how will employees in the medical office have to be trained regarding privacy