Question

A healthcare analytics platform stores patient records used by multiple internal teams: clinical staff need full records for treatment, while a marketing team wants access to demographic fields for outreach campaigns. The privacy engineer is designing an access model that enforces purpose limitation at the data layer so that even authorized users can only retrieve fields consistent with their stated processing purpose. Which access control approach BEST enforces this requirement technically?

Accepted Answer

Implement attribute-based access control (ABAC) with policies that evaluate user role, data-field sensitivity tags, and declared processing purpose before granting field-level access

Answer

Grant both teams read access to the full record set and rely on an acceptable-use policy prohibiting out-of-purpose access

Answer

Create a single 'analytics' role with broad read permissions and log all queries for after-the-fact review by the privacy office

Answer

Encrypt the entire patient record at rest and distribute the decryption key to both the clinical and marketing teams