Define privacy by design and identify two examples in health IT.

• A. Privacy by design is the integration of privacy protections into system design; examples include least-privilege access and data minimization by default, with default privacy settings.
• B. Privacy by design means only encryption is used.
• C. Privacy by design is only about administrative policies.
• D. Privacy by design applies only to paper records.

Answer: (A)