Employees should be trained with regard to their responsibilities under this policy. In addition, employees should be trained to recognize, respond to, and where appropriate, report any unauthorized or fraudulent attempts to obtain member information.