You work in a hospital compliance department. A patient who was recently discharged from the hospital comes into the office to report that he believes his health information was disclosed without his authorization to his employer. Assume that he was not hospitalized for a work-related injury. What options can you offer to him for making a complaint? Suppose that the information was disclosed by a nurse employed by the hospital. What practices should the hospital have in place for complaint investigation and discipline?