Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.
A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal
Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.
What should the Architect do in order to make sure Universal Health stays compliant?

Question

Universal Health is planning to store patient notes in Salesforce. Patient notes consist of long text notes taken by a use to document phone calls with a patient.

A date audit has identified that these notes can contain Personally Identifiable Information (PII) and Personal

Health Information (PHI). The regulatory requirements state that this data must be encrypted at rest as well as in transit.

What should the Architect do in order to make sure Universal Health stays compliant?

lakshmi govindu · Accepted Answer

Enable Salesforce Shield Platform Data Encryption and mark the patient notes field as encrypted.

lakshmi govindu · Answer

No action is required; all Salesforce data is encrypted at rest as part of Salesforce's standard trust measures.

lakshmi govindu · Answer

Create a new Custom Field of type 'Text (Encrypted)' and move the patient notes data into the new field.

lakshmi govindu · Answer

Use an Apex trigger and the Apex Crypto class to encrypt patient notes as soon as they are saved to Salesforce.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 145 - Certified Sharing and Visibility Architect discussion

Suggested answer: B

0 comments