please choose the most correct answer for both questions.

9. The Health Insurance Portability and Accountability Act ("HIPAA") consists of which two rules to address the handling of protected health information (\"PHI")? A. Transaction Rule and Minimum Use Rule. B. Privacy Rule and Security Rule. C . Privacy Rule and Breach Notification Rule. D. Security Rule and Minimum Use Rule. 10. Which of the following strategies is a company's best bet to avoid having to notify residents of a data breach involving personal information? A. Encrypt, using high-grade encryption, all personal information, including sensitive personal information. B. Purge all personal information after one year. C . Use a firewall and duallayer authentication to protect all personal information. D. Ensure that all personal information is protected under the oversight of a privacy ofcer