Protect PHI, share only the minimum necessary, understand the safeguards, and report a suspected breach fast.