What to do if a confidentiality breach occurs, including reporting, investigation, and disciplinary action.