Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CIPT topic 1 question 127 discussion

Actual exam question from IAPP's CIPT
Question #: 127
Topic #: 1
[All CIPT Questions]

SCENARIO -
Please use the following to answer the next question:
Light Blue Health (LBH) is a healthcare technology company developing a new web and mobile application that collects personal health information from electronic patient health records. The application will use machine learning to recommend potential medical treatments and medications based on information collected from anonymized electronic health records. Patient users may also share health data collected from other mobile apps with the LBH app.
The application requires consent from the patient before importing electronic health records into the application and sharing it with their authorized physicians or healthcare provider. The patient can then review and share the recommended treatments with their physicians securely through the app. The patient user may also share location data and upload photos in the app. The patient user may also share location data and upload photos in the app for a healthcare provider to review along with the health record. The patient may also delegate access to the app.
LBH's privacy team meets with the Application development and Security teams, as well as key business stakeholders on a periodic basis. LBH also implements
Privacy by Design (PbD) into the application development process.
The Privacy Team is conducting a Privacy Impact Assessment (PIA) to evaluate privacy risks during development of the application. The team must assess whether the application is collecting descriptive, demographic or any other user related data from the electronic health records that are not needed for the purposes of the application. The team is also reviewing whether the application may collect additional personal data for purposes for which the user did not provide consent.
The Privacy Team is conducting a Privacy Impact Assessment (PIA) for the new Light Blue Health application currently in development. Which of the following best describes a risk that is likely to result in a privacy breach?

  • A. Limiting access to the app to authorized personnel.
  • B. Including non-transparent policies, terms and conditions in the app.
  • C. Insufficiently deleting personal data after an account reaches its retention period.
  • D. Not encrypting the health record when it is transferred to the Light Blue Health servers.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
PaigeH7
4 days, 18 hours ago
Selected Answer: D
encrypting health records
upvoted 1 times
...
z80r
1 year, 2 months ago
Selected Answer: D
D my friends
upvoted 1 times
...
64wlg_CBD
2 years, 1 month ago
B. If it's a paid app it will only be accessible to paid users.
upvoted 1 times
...
Sbowo
2 years, 3 months ago
D, the risk of privacy breach is much more higher if the data is not encrypted during transport
upvoted 3 times
...
187san
2 years, 3 months ago
D If you don't encrypt , PHI its breach of HIPAA security rule
upvoted 2 times
...
837vq3
2 years, 3 months ago
Selected Answer: C
i think its C
upvoted 2 times
...
k4d4v4r
2 years, 4 months ago
I think it's B and C.
upvoted 1 times
...
837vq3
2 years, 4 months ago
A privacy impact assessment (PIA) is an analysis of how personal information is handled throughout the data life cycle within an organization. A PIA ensures that organizations apply legal, regulatory and policy requirements regarding privacy, assesses privacy risks, and methods of risk mitigation. A significant goal of performing a PIA is to compel an organization to think about the choices it makes for its processes and how those choices will impact privacy. Privacy technologists can utilize the findings of a PIA to determine whether privacy risk is appropriately addressed using the privacy policies and procedure
upvoted 2 times
...
837vq3
2 years, 4 months ago
I think it should be "C"
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...