please see attachment 1 DAT 250 Project One Client Descriptions Binghamton Health Clinic Binghamton Health Clinic is a newly constructed,

1

DAT 250 Project One Client Descriptions

Binghamton Health Clinic
Binghamton Health Clinic is a newly constructed, walk-in medical clinic located in New Hampshire.
Medical organizations are subject to HIPAA regulations. This affects the kinds of data that may be
released to individuals and companies.

• Scenario A: A patient’s family members arrive at the hospital and request information about the
patient’s medical condition and treatment plan. They are concerned and seeking updates on the
patient’s status.

• Scenario B: A patient is transferred from one hospital to another for specialized treatment. The
receiving hospital requests the patient’s medical records, including diagnostic test results and
treatment history, to facilitate continuity of care.

Alverne College
Alverne College is a local community college. Private and public educational institutions are typically
required to follow FERPA guidelines. These guidelines affect whether certain kinds of student
information can be released. They also specify how certain kinds of data can be used, who information
can be released to, and under what circumstances the release must take place.

• Scenario A: A concerned parent calls the college administration office to inquire about their
child’s grades and academic performance. They request detailed information, including specific
course grades and GPA.

• Scenario B: A faculty member from the psychology department approaches the college
administrator seeking permission to share a student’s performance in their class with the
student support services department. The faculty member believes that the student may benefit
from additional academic support.

Joykid Tech
Joykid Tech is a small manufacturing and sales company that produces and imports children’s toys. They
have two facilities in California and an additional production facility in Germany. This international
commercial company will need to consider both GDPR and California CCPA laws as it works to grow its
business.

• Scenario A: The firm plans to launch a targeted sales campaign using customer data collected
from various sources, including website visits, social media interactions, and past purchases. The
campaign aims to personalize sales offerings for different customer segments.

2

• Scenario B: The firm operates in multiple countries, with offices in Europe and the United
States. The firm’s international teams collaborate on projects and regularly share customer data,
including contact information and behavioral data, across borders for analysis and campaign
planning.