When imposing fines for violating disclosure of phi, which may not be considered:
O the pattern of disclosure
O the circumstances, extent and gravity of the disclosure risk of financial or reputational harm if
O the state licensing agency fined
O the covered entity