Select the correct statement regarding the administrative requirements of the HIPAA privacy rule

A: A covered entity must designate, and document, a privacy official, security officer and a HIPA8 compliance officer B: A covered entity must designate, and document, the same person to be both privacy official and as the contact person responsible for receiving complaints and providing further information about the notice required by the regulations. C: A covered entity must implement and maintain written or electronic policies and procedures with respect to P1-Il that are designed to comply with HIPAA standards, implementation specifications and other requirements. D: A covered entity must train, and document the training of. at least one member of its workforce on the policies and procedures with regard to PHI as necessary and appropriate for them to carry out their function within the covered entity no later than the privacy rule compliance date. E: A covered entity must retain the document required by the regulations for a period often years from the time of it’s creation or the time it was last in effect, which ever is later