When evaluating privacy in a digital healthcare platform, which practice directly aligns with established healthcare privacy principles?

### Why this is right - **A** is true: notice and appropriate consent are explicit privacy questions. - **B** is true: purpose, access, and employee activity are relevant to assessing information handling. - **C** is true: retention, storage location, and vendor access are among the listed questions. ### The concept Privacy review considers the information lifecycle: collection, use, access, storage, sharing, retention, and patient control. Security questions include whether information is encrypted during storage and transmission. Patients may also need ways to request access to or correction of their records. Considering these points helps identify risks that would be missed by looking only at whether the app provides a useful service. ### The other options - **D. Can the organization ignore encryption and patient correction requests if the app is convenient?** Convenience does not remove the stated security and patient-information questions. Encryption and correction processes are among the relevant safeguards and rights. ### Terms - **Consent**: An informed indication of agreement to a particular collection or use. - **Retention**: The period for which information is kept. - **Encryption**: A method of protecting information by making it unreadable without the appropriate key. ### Remember Review the full information lifecycle, not just the app's healthcare benefit.