Answer: Data residency

## Detailed Explanation **Correct Answer: A (Data Residency)** **Why Data Residency is the Optimal Choice:** 1. **Directly Addresses Geographic Restrictions:** The question explicitly states that sensitive patient data "must not leave the country the data is located in." Data residency is specifically defined as the practice of ensuring that data is stored and processed within specific geographic boundaries (such as a country or region). This directly aligns with the regulatory requirement mentioned. 2. **Compliance with Data Sovereignty Regulations:** Healthcare data is subject to strict regulations like HIPAA (in the U.S.), GDPR (in Europe), and various national healthcare privacy laws. These regulations often include data residency requirements that mandate where certain types of sensitive data can be stored and processed. Implementing a data residency strategy ensures compliance with these legal frameworks. 3. **Protects Patient Privacy:** By restricting data movement across borders, data residency minimizes the risk of unauthorized access or exposure that could occur during international data transfers. This is particularly critical for medical records and images, which contain highly sensitive personal health information. 4. **Foundation for Other Governance Measures:** While data quality, discoverability, and enrichment are important aspects of data governance, they do not inherently address geographic restrictions. Data residency provides the foundational constraint that must be satisfied first before other strategies can be effectively implemented within compliance boundaries. **Why Other Options Are Less Suitable:** - **B. Data Quality:** While crucial for accurate AI diagnostics, data quality focuses on accuracy, completeness, and reliability of data. It does not address where data is stored or processed geographically. - **C. Data Discoverability:** This involves making data easily findable and accessible to authorized users through metadata and cataloging. While important for efficient use of data, it doesn't enforce geographic restrictions on data storage. - **D. Data Enrichment:** This refers to enhancing existing data with additional information from external sources. While potentially valuable for improving diagnostic accuracy, it could actually increase compliance risks if enrichment involves data transfers across borders. **Best Practice Consideration:** In healthcare AI implementations, data residency should be established as a foundational governance principle before addressing other aspects like data quality or enrichment. This ensures that all subsequent data processing occurs within compliant geographic boundaries, protecting both patient privacy and organizational compliance.