What are the requirements for handling protected data? Write any four.

The requirements for handling protected data are: Access control: Access to protected data must be provided on a least privilege basis. No person or system should be given access to the data unless required by business process. In such cases where access is required, permission to use the data must be granted by the Data Steward. Sharing: Protected data may be shared among the employees of the organization according to well-defined business process approved by the Data Steward. It may be released publicly only according to well-defined business processes, and with the permission of the Data Steward. Retention: Protected data should only be stored for as long as is necessary to accomplish the documented business process. Incident Notification: If there is a potential security incident that may place protected data at risk of unauthorized access, then the Technology Security Services must be notified about the same.