Role-based access controls limit patient-data access to what is needed for a user's job functions.

### Why this is right Role-based access controls assign permissions according to work roles, helping limit access to what a person needs for job functions. This reduces unnecessary exposure of patient information. ### The concept Access control determines what information or actions a user is permitted to reach. Role-based control links permissions to a job function rather than giving every employee the same access. Unique user identifiers support accountability by distinguishing users, while strong authentication adds a check on whether the person can use the account. These measures complement one another; none replaces the others. ### The other options - **False**: this would be incorrect because limiting access by job function is the stated purpose of role-based controls. ### Terms - **Role-based access control**: a permission model in which access depends on a user's assigned role. - **Permission**: an authorization to view or change a resource. ### Remember Give users the access their work requires, rather than treating access as all or nothing.