SCENARIO Please Use the Following to Answer the Next Question

question 27

Multiple Choice

SCENARIO Please use the following to answer the next question: Light Blue Health (LBH) is a healthcare technology company developing a new web and mobile application that collects personal health information from electronic patient health records. The application will use machine learning to recommend potential medical treatments and medications based on information collected from anonymized electronic health records. Patient users may also share health data collected from other mobile apps with the LBH app. The application requires consent from the patient before importing electronic health records into the application and sharing it with their authorized physicians or healthcare provider. The patient can then review and share the recommended treatments with their physicians securely through the app. The patient user may also share location data and upload photos in the app. The patient user may also share location data and upload photos in the app for a healthcare provider to review along with the health record. The patient may also delegate access to the app. LBH's privacy team meets with the Application development and Security teams, as well as key business stakeholders on a periodic basis. LBH also implements Privacy by Design (PbD) into the application development process. The Privacy Team is conducting a Privacy Impact Assessment (PIA) to evaluate privacy risks during development of the application. The team must assess whether the application is collecting descriptive, demographic or any other user related data from the electronic health records that are not needed for the purposes of the application. The team is also reviewing whether the application may collect additional personal data for purposes for which the user did not provide consent. The Privacy Team is conducting a Privacy Impact Assessment (PIA) for the new Light Blue Health application currently in development. Which of the following best describes a risk that is likely to result in a privacy breach?

• A) Limiting access to the app to authorized personnel.
• B) Including non-transparent policies, terms and conditions in the app.
• C) Insufficiently deleting personal data after an account reaches its retention period.
• D) Not encrypting the health record when it is transferred to the Light Blue Health servers.

---

Definitions:

Corn Laws

Historical tariffs and trade restrictions on imported grain in the United Kingdom, aimed at protecting domestic producers but leading to widespread controversy.

Republic Of Texas

Refers to the sovereign country that existed from 1836 to 1845, after gaining independence from Mexico, before it joined the United States as the 28th state.

Protestant Americans

Individuals residing in the United States who identify with or belong to branches of Christianity that originated from the Protestant Reformation.

Latin American Countries

Nations in the Americas where Romance languages (primarily Spanish and Portuguese, along with French) are predominantly spoken, rich in diverse cultures and histories.