Google Professional Machine Learning Engineer Question 128
Select 3Google Cloud PlatformYou are designing a machine learning pipeline on Google Cloud that involves training a predictive model using healthcare data containing personally identifiable information (PII). Which of the following actions should you take to ensure compliance with privacy regulations and best practices while handling this data?
- A
Use de-identification techniques such as data masking or tokenization on the healthcare data before processing.
- B
Store the raw healthcare data in plain text in Google Cloud Storage to ensure accessibility during model training.
- C
Implement access controls and use IAM roles to restrict access to the healthcare data to authorized personnel only.
- D
Enable encryption at rest and in transit for the healthcare data across all Google Cloud services.
- E
Share the raw healthcare data with external collaborators to improve the model’s performance.
Show answer and explanation
Correct answers: A, C, D
Explanation
Handling sensitive healthcare data requires strict adherence to privacy regulations and best practices. De-identification helps protect PII, access controls ensure only authorized personnel can access the data, and encryption protects the data from unauthorized access during storage and transmission. Storing raw data in plain text or sharing it without safeguards poses significant privacy and compliance risks.
- A. Correct.
This is correct. De-identification techniques like data masking or tokenization help protect sensitive information and reduce the risk of exposing PII during processing.
- B. Incorrect.
This is incorrect. Storing raw healthcare data in plain text is a significant security risk and violates privacy best practices and compliance regulations.
- C. Correct.
This is correct. Implementing IAM roles and access controls ensures that only authorized personnel can access sensitive healthcare data, adhering to the principle of least privilege.
- D. Correct.
This is correct. Encryption is a fundamental practice to safeguard sensitive data both at rest and in transit, ensuring compliance with privacy and security standards.
- E. Incorrect.
This is incorrect. Sharing raw healthcare data with external collaborators without proper anonymization or de-identification violates privacy regulations such as HIPAA and GDPR.