Answer: yes
Explanation: Patients have to provide an additional, specific authorization for training uses and disclosures of their information. What about reporting privacy or security problems? Are the requirements for students the same as for regular workers? Yes.