A professional sport organization accidentally exposes an at…

A prоfessiоnаl spоrt orgаnizаtion accidentally exposes an athlete’s medical records through a cybersecurity breach. The organization immediately informs the affected athlete, strengthens its data protection systems, and reviews its file storage processes. Which combination of HIPAA rules is MOST relevant to this response?