A healthcare application allows patients to book appointment…
A healthcare application allows patients to book appointments online using a unique patient ID. The system stores the appointment logs in a shared database accessible by multiple departments. During a privacy audit, it was discovered that a hospital staff member could correlate patient IDs across departments to infer sensitive health conditions (e.g., cancer treatment bookings in oncology). To mitigate this risk, the system architects’ separate identifiers per department and ensure patient actions cannot be linked across domains. Which LINDDUN threat is being addressed, and which privacy-enhancing strategy is applied?
Read Details