Which practice supports protecting patient privacy in an operational setting while enabling care delivery?

• A. Define access by need-to-know, limit data sharing to required personnel, implement data security controls, and follow privacy policies.
• B. Allow open access to patient data for all staff.
• C. Keep patient data only on paper in unsecured cabinets.
• D. Share patient data with external contractors without agreements.

Answer: (A)