Question

A compliance officer at a healthcare organization needs to measure how well the company's Microsoft 365 environment aligns with the HIPAA/HITECH regulation. They want a prebuilt set of controls and recommended actions specific to that regulation, rather than starting from a blank template. Which Microsoft Purview Compliance Manager feature should they use?

Accepted Answer

Create an assessment based on a prebuilt regulatory template for HIPAA/HITECH

Answer

Apply a sensitivity label that automatically encrypts all patient records

Answer

Configure a retention policy to preserve health records for the required period

Answer

Run an eDiscovery search to locate all documents containing health information