Salesforce Sharing and Visibility Certification Practice Exam

What is the recommended action for Universal Health to ensure patient notes containing PII and PHI are compliant with regulatory requirements?

1. No action is required; all Salesforce data is encrypted at rest as part of Salesforce's standard trust measures.

2. Enable Salesforce Shield Platform Data Encryption and mark the patient notes field as encrypted.

3. Create a new Custom Field of type "Text (Encrypted)" and move.

4. Use an Apex trigger and the Apex Crypto class to encrypt patient notes as soon as they are saved to Salesforce.

The correct answer is: Enable Salesforce Shield Platform Data Encryption and mark the patient notes field as encrypted.

Enabling Salesforce Shield Platform Data Encryption and marking the patient notes field as encrypted is the recommended action for Universal Health to ensure compliance with regulatory requirements related to personally identifiable information (PII) and protected health information (PHI). Salesforce Shield provides enhanced security features that allow organizations to encrypt sensitive data at rest, giving a layer of protection over sensitive information such as patient notes. By marking the specific field as encrypted, sensitive data is securely stored and protected against unauthorized access or breaches, thus aligning with compliance obligations such as HIPAA or other relevant healthcare regulations. This encryption helps safeguard sensitive data even in the event of unauthorized access to the database. It ensures that the information remains confidential and is accessible only to authorized users with the appropriate decryption keys. While it is true that Salesforce implements standard trust measures that include data being encrypted at rest, relying solely on these measures without additional targeted encryption for sensitive fields may not meet specific regulatory compliance requirements, which often necessitate robust data protection practices. Creating a new custom field of type "Text (Encrypted)" could be a way to protect data, but it is less efficient than marking an existing field for encryption, as it introduces additional complexity and might involve duplicating data or losing historical records. Using an Apex