Certified Information Systems Security Professional (CISSP) — Question 450

A hospital enforces the Code of Fair Information Practices. What practice applies to a patient requesting their medical records from a web portal?

Answer options

• A. Purpose specification
• B. Collection limitation
• C. Use limitation
• D. Individual participation

Correct answer: D

Explanation

The correct answer, D. Individual participation, is relevant because it emphasizes a patient's right to access their personal medical records. The other options, while important, do not specifically address the patient's right to request and obtain their own information.