CompTIA Data+ (DA0-002)Data Concepts and EnvironmentsHard
A healthcare provider is implementing a new electronic health record (EHR) system. The system needs to classify patient data into categories such as 'confidential', 'sensitive', and 'public' based on regulatory requirements (e.g., HIPAA). This classification is crucial for controlling access and ensuring compliance. Which data concept is being applied here?
- AData Lineage
- BData Governance
- CData Sensitivity
- DData Quality
Show answer & explanationAnswer & explanation
Correct answer: C. Data Sensitivity
Data sensitivity refers to classifying data based on its potential impact if compromised, lost, or exposed. In healthcare, classifying patient data as 'confidential' or 'sensitive' due to HIPAA regulations directly addresses data sensitivity to manage risks and access controls.
Why the other options are wrong
- A. Data lineage tracks the origin and transformations of data, not its classification for security.
- B. Data governance is the overall management of data availability, usability, integrity, and security, but 'data sensitivity' is the specific concept being applied for classification.
- D. Data quality focuses on accuracy, completeness, and consistency of data, not its security classification.
Data Sensitivity
The classification of data based on its importance, value, and the potential negative impact (reputational, financial, legal) if it is compromised, lost, or improperly accessed/disclosed.
- Classifies data by risk level (e.g., public, internal, confidential, restricted).
- Guides access controls and security measures.
- Critical for regulatory compliance (e.g., HIPAA, GDPR).
- Determines data handling and protection requirements.
Memory trick: Think 'Sensitivity' as a 'Security' label for your data.