Gathering privacy, security and consent requirements for patient data
Key Takeaway
In discovery, gather requirements for data security, caller identity, consent and privacy requests, because each kind maps to a specific Salesforce capability.
Agentforce Health stores protected health information (PHI), so healthcare customers must follow laws like HIPAA and privacy rules like GDPR and CCPA. During discovery, a consultant gathers four kinds of requirements so the solution can meet these obligations.
Regulations behind the requirements
Healthcare organizations must comply with regulations such as HIPAA that govern PHI. Failing to comply has legal consequences.
Data protection and privacy regulations also require companies to keep personal data secure and private and to honor people's requests about how their data is used. Examples of these regulations are:
- GDPR (European Union)
- CCPA (United States)
- PIPA (Japan)
- LGPD (Brazil)
- PIPEDA (Canada)
Salesforce gives guidance on common privacy principles and examples of customer requests. However, each company must decide the best way to comply with the regulations that apply to it.