You are responsible for database security in a healthcare organization. A database administrator mistakenly granted read access to sensitive patient records to a non-privileged user. What action should you take to rectify this situation?

The correct action to rectify the situation is to revoke the non-privileged user's read access immediately. This ensures that unauthorized individuals cannot view sensitive patient records. Informing the database administrator and conducting an audit are necessary steps, but the immediate action should be to remove the unauthorized access. Implementing role-based access control is a preventive measure for the future but does not address the current issue directly.