A. Educate consumers about their rights and responsibilities regarding the use of their personal health information. B. Extend privacy and security principles into all aspects of the data use, access, and control program adopted in the organization. C. Honor the patient -centric direction of the national agenda.