_ is NOT required of counselors by HIPAA

A. A privacy officer
B. Procedural practices
C. Deadbolt locks on medical records
D. A written declaration of client rights

C. Deadbolt locks on medical records