WMU personnel shall immediately report any potential or suspected breach of PHI or WMU’s privacy policies to their unit’s HIPAA Compliance Officer ... unauthorized individual would not reasonably have ...