A hospital configures clinical notes so every intern account can edit any record without need-to-know controls. Which processing principle is most directly undermined?
Select an answer to reveal the explanation.
Short Explanation
Clinical notes are not a shared whiteboard for every badge in the building. Integrity and confidentiality mean appropriate security—need-to-know access, not open edit rights for every intern login. Wide-open permissions invite unauthorised changes and disclosures.
Full Explanation
Article 5(1)(f) requires processing that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organisational measures. Granting every intern unconstrained edit access to clinical notes undermines integrity and confidentiality by failing basic access-control discipline proportionate to health data risk.