What is the role of a Privacy Impact Assessment (PIA/DPIA) in health IT projects?

• A. Increases data collection without risk assessment.
• B. Identifies privacy risks in a project, evaluates potential impacts on data subjects, and guides mitigation strategies to ensure privacy by design.
• C. Only drafts data sharing agreements.
• D. Replaces privacy laws with internal policies.

Answer: (B)