Internal activities, supplemented with external support and assessment that reviews business processes and operations, help to ensure ongoing awareness of important issues in connection with member and patient privacy.