Explain how a digital healthcare platform can respect both access to healthcare and privacy when it needs health information to deliver care.

### What a good answer covers - Identify healthcare access as a positive right and privacy as a negative right. - Explain that necessary data collection can create tension but does not automatically justify unlimited collection. - Propose purpose limitation, appropriate consent, access controls, activity logs, retention limits, and encryption. - Include patient access or correction rights and consider vendors and information stored outside Canada. - Explain that privacy and security safeguards should be built into design and operation. ### The concept Positive and negative rights describe different obligations. Delivering healthcare requires provision, while respecting privacy limits interference with personal information. A health platform can pursue both by collecting only what care requires and controlling how the information is handled. The key is to make data practices transparent, purpose-bound, secure, and reviewable rather than adding safeguards only after a system is already deployed. ### Remember Design the service so that healthcare access does not become an excuse for unnecessary data use.