Need help with the Security Health Care Information Systems

Hospital implements a additional policy and procedure on telephone messages after an employee did not observe the minimum necessary requirement when she left a telephone message with the daughter of a patient that detailed her medical treatment give your opinion as to whether or not the new procedure resolve the issue and suggest additional procedure that the hospital could utilize to secure patient privacy.The new policy trained employees regarding leaving telephone message and yearly training