How should privacy protections be maintained while meeting operational needs for care?

• A. Define access by need-to-know, implement data security controls, and follow legal/privacy policies.
• B. Share all data with staff to ensure care.
• C. Avoid any data security controls to speed care.
• D. Record patient data in unencrypted form on shared drives.

Answer: (A)