A healthcare organization stores patient medical records in Google Cloud. During a security review, the compliance team wants to ensure that even if an unauthorized party gains access to the underlying storage media, the patient data cannot be read. Which principle of the CIA triad is this control primarily addressing?