At a hospital, medical personal carry handheld computers which contain patient health datA. These
handheld computers are synchronized with PCs which transfer data from a hospital database.
Which of the following would be of the most importance?

A.
The handheld computers are properly protected to prevent loss of data confidentiality, in case of
theft or loss.

B.
The employee who deletes temporary files from the local PC, after usage, is authorized to maintain
PCs.

C.
Timely synchronization is ensured by policies and procedures.

D.
The usage of the handheld computers is allowed by the hospital policy.

Explanation:
Data confidentiality is a major requirement of privacy regulations. Choices B, C and D relate to
internal security requirements, and are secondary when compared to compliance with data privacy
laws.