Which privacy approach best maintains patient privacy while enabling care in an operational environment?

• A. Define access by need-to-know, limit data sharing to required personnel, implement data security controls, and follow privacy policies.
• B. Create a universal access policy granting all staff access to patient records.
• C. Post patient identifiers on public boards to track care.
• D. Store all data in unencrypted form on shared drives.

Answer: (A)