Handling sensitive health information is a big job. Your organization should understand what information is collected and how it is protected.