You are the HIPAA Privacy Officer and receive a phone call from Khaleen at “The Hair Boutique” across town. Khaleen indicates that one of her clients, Aimee, just told her that the two patients admitted to your hospital yesterday were poisoned by the principal’s son, Orlando. Khaleen said that she heard about the school poisonings on the local news but wasn’t aware that Orlando was involved.