A healthcare company needs to ensure the privacy of its patients' health records. When considering the deployment of a new online patient portal, which measure is most effective for protecting the privacy of health records that are accessed and transmitted through the portal?
Applying data masking techniques to the records before storage
Encrypting data in transit
Implementing geographic restrictions on where the health records can be accessed
Requiring multi-factor authentication for user access to the portal