What other policies and procedures are in place to maintain the privacy, security, and confidentiality of patient information?