Which statement best describes data minimization practices in Intercom Plus?

Which statement best describes data minimization practices in Intercom Plus?

• A. No PHI should ever be collected.
• B. Collect all PHI and share with marketing.
• C. Only the minimum PHI needed to fulfill the purpose, stored securely.
• D. Store PHI insecurely for quick retrieval.

Answer: (C)

Data minimization means collecting only the information that’s truly needed for a specific, defined purpose and protecting it throughout its life cycle. In Intercom Plus, this means gathering just the PHI that’s necessary to accomplish the customer interaction and storing it securely. This approach is best because it reduces the amount of sensitive information at risk and strengthens privacy and security controls. By keeping the PHI to what’s necessary and securing it, you lower the chance of misuse or breach and stay aligned with privacy requirements. Why the other ideas don’t fit: collecting no PHI would prevent you from delivering essential services; gathering all PHI and sharing it with marketing violates both minimization and consent principles; storing PHI insecurely creates clear security vulnerabilities that could expose patient information.

Data minimization means collecting only the information that’s truly needed for a specific, defined purpose and protecting it throughout its life cycle. In Intercom Plus, this means gathering just the PHI that’s necessary to accomplish the customer interaction and storing it securely.

This approach is best because it reduces the amount of sensitive information at risk and strengthens privacy and security controls. By keeping the PHI to what’s necessary and securing it, you lower the chance of misuse or breach and stay aligned with privacy requirements.

Why the other ideas don’t fit: collecting no PHI would prevent you from delivering essential services; gathering all PHI and sharing it with marketing violates both minimization and consent principles; storing PHI insecurely creates clear security vulnerabilities that could expose patient information.