The Advanced Patient Card in Health Cloud is a FlexCard-based UI component that can be extended to show more patient context, such as Clinical Alerts. To display additional fields (Category, SubjectID, Date for active alerts), the developer should:
A . Clone the parent card
Best practice is to clone the delivered parent Patient Card rather than edit it directly, so you preserve the Salesforce-provided baseline functionality.
B . Create and activate a new child card
Child cards display specific contextual data (such as Clinical Alerts).
To customize which fields show, you create a new child card and activate it.
C . Create a DataRaptor to extract necessary data
Clinical Alert data must be pulled from Health Cloud objects.
A DataRaptor Extract retrieves the required fields (Category, SubjectID, Date) for use in the FlexCard child component.
Why not the others?
D . Define session variables to control visibility of clinical data - Session variables can control context in OmniStudio, but they aren't required just to display fields on the Patient Card.
E . Change the child card state to show active - Card states are used for conditional rendering (loading, error, empty states). Showing active alerts requires data filtering in the DataRaptor, not card state changes.
Salesforce Health Cloud Reference:
Salesforce Health Cloud - Advanced Patient Card
"Clone the Advanced Patient Card to customize it while preserving the delivered version."
"Use child cards to display detailed data such as conditions, medications, or clinical alerts."
"Retrieve data for FlexCards with DataRaptor Extracts."

Step-by-Step Explanatio n:
Requirement:
Encrypt files in a full sandbox instance.
Salesforce Shield Platform Encryption:
Provides encryption of files and attachments at rest across Salesforce environments (including sandboxes).
"Use Shield Platform Encryption to encrypt files and attachments stored in Salesforce, including those in sandbox environments."
- Salesforce Shield Platform Encryption Guide
Other Options:
Classic Encryption: Only encrypts a limited set of standard fields, not files or attachments.
Salesforce Data Mask: Masks data for sandbox use, but does not encrypt files for runtime.
Industry Data Security: Not a Salesforce product for file encryption.
Reference:
Shield Platform Encryption Guide

Step-by-Step Explanatio n:
Requirement:
External provider needs access to patient allergy information.
Interoperability API:
Salesforce Health Cloud provides FHIR-based Interoperability APIs that expose clinical data, including AllergyIntolerance resources.
"Use the Health Cloud Interoperability API (FHIR R4) to retrieve AllergyIntolerance resources and other clinical data for a patient."
- Health Cloud Interoperability API Guide
Other Options:
Clinical Summary Healthcare API: Provides a summary but not structured, granular allergy data.
AllergyMedication API: Not a standard Salesforce API.
Patient Healthcare API: Broader resource, but allergies specifically are available through the Interoperability API.
Reference:
Health Cloud Interoperability API Guide