What Data Governance Strategy Keeps Patient Data in the Country?

Data Governance and Compliance

A hospital is developing an AI system to assist doctors in diagnosing diseases based on patient records and medical images. To comply with regulations, the sensitive patient data must not leave the country the data is located in. Which data governance strategy will ensure compliance and protect patient privacy?

  1. Data residency Source Reference Answer
  2. Data quality
  3. Data discoverability
  4. Data enrichment

Community Votes

A
100%

100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests your understanding of data governance domains, specifically how data residency addresses geographic storage requirements while other options (quality, discoverability, enrichment) focus on data value and accessibility—not compliance with location-based regulations.

Data residency is the correct governance strategy for ensuring sensitive patient data remains within a specific country's borders, meeting regulatory compliance. Community consensus strongly favors option A, emphasizing its role in enforcing data sovereignty and privacy laws like GDPR and HIPAA.

Choosing Data enrichment or Data quality because they sound like proactive data management. However, these options do not address the core requirement of keeping data within a country; they improve data value, not geographic constraint.

Community Discussion (3 comments)

Jessiii 👍 1 Selected: A
Ensures that sensitive data remains within the geographic boundaries of a specific country or region, helping to comply with data sovereignty and privacy regulations (such as HIPAA or GDPR).
Jeffzyzz 👍 1 Selected: A
Data residency (residencia de datos) es una estrategia de gobernanza de datos que: ✔ Asegura que los datos permanezcan en una ubicación geográfica específica, según las regulaciones del país. ✔ Cumple con normativas de privacidad y seguridad como GDPR en Europa o HIPAA en EE.UU. ✔ Restringe el almacenamiento y procesamiento de datos fuera del país, evitando transferencias no permitidas. En este caso, un hospital que maneja datos sensibles de pacientes debe asegurarse de que la información médica no se almacene ni procese fuera del país, lo que hace que Data residency sea la mejor estrategia.
jerry00218 👍 1 Selected: A
Only A talking about the data how to store

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Data residency mandates that data be stored and processed within a specific jurisdiction, directly aligning with the hospital's need to keep patient data within the country. Comment [1] correctly explains that residency ensures data remains within geographic boundaries and supports compliance with HIPAA, GDPR, and similar regulations. This strategy is a fundamental element of data governance frameworks for regulated industries.

Why the Other Options Are Wrong

Data quality refers to accuracy, completeness, and consistency, not location. Data discoverability is about making data easy to find and catalog, which is unrelated to geographic restrictions. Data enrichment involves augmenting data with additional sources or attributes, which does not address sovereignty. None of these options satisfy the explicit compliance requirement of preventing data from leaving the country.

Community Comment Notes

All comments (100% votes) support answer A. Comment [2] adds a clear breakdown, highlighting how residency restricts processing outside the country and prevents unauthorized transfers. Comment [3] succinctly points out that only option A relates to data storage. The unanimous consensus reinforces that residency is the correct governance strategy for data localization needs.

Official Reference

Exam Strategy

When a governance question mentions 'data must not leave the country' or 'data sovereignty,' immediately think about data residency. Look for keywords like 'geographic location,' 'regional boundaries,' or 'local storage' to distinguish residency from other data management concepts.

Related Analysis

Practice All AIF-C01 Questions

Access 100 questions with complete answers and detailed explanations.

View Full AIF-C01 Practice Test →

← Back to AIF-C01 Study Guide