Which of the following is NOT true of notices of privacy practices?
A) Must be available at the site where the individual is treated
B) Must be posted in a prominent place
C) Must contain content that may not be changed
D) Must be prominently posted on the covered entity's website when the entity has one