Report incidents involving all privacy issues (potential breeches of PHI or PII) immediately to our risk manager.