1. 127 workers at UCLA Hospital accessed celebrities' medical records without permission, leading to firings, suspensions, and warnings. This breach of confidentiality concerned hospital staff. 2. To avoid similar breaches, mandatory HIPAA and protected health information (PHI) training is required. Clear rules defining who can access patient information are also needed. 3. Training must be provided yearly and is required for doctors, nurses, medical records staff, laboratory staff, transporters and other staff involved in direct patient care. Violations will result in additional training or possible dismissal.