<sod >AHS also implemented new mandatory completion of privacy and security training for all staff every three years.< eod>< sod > He noted that the AHS policy requiring mandatory completion of privacy and security training for all staff every three years was relatively new when the South Health Campus situation occurred.< eod>