Question

A multinational pharmaceutical company is migrating patient trial data to a cloud provider. The company must comply with regulations requiring that EU citizen health data remain physically stored within EU borders and cannot be transferred to other jurisdictions. Which of the following should the security architect implement to meet this requirement?

Accepted Answer

Configure geolocation restrictions to ensure data residency within EU data centers

Answer

Implement encryption at rest and in transit for all stored patient data

Answer

Deploy tokenization to replace sensitive patient identifiers with non-sensitive equivalents

Answer

Enable data classification tags to mark all records as confidential or restricted