A nurse discovers that a coworker accessed a patient's electronic health record without a valid reason related to patient care. According to the HIPAA Enforcement Rule, what is the nurse's best initial action to address this violation?

Report the incident to the facility's privacy officer and cooperate with any subsequent investigation.

Confront the coworker directly and demand they delete the accessed information.

Ignore the incident as it is likely a minor infraction without serious consequences.

Immediately notify the patient affected without reporting to any organizational authority.