How should confidentiality and privacy be maintained in reports?

• A. Redact sensitive data where appropriate; share only with authorized personnel.
• B. Share all details with everyone involved.
• C. Post reports publicly to increase transparency.
• D. Store reports without any access control.

Answer: (A)

Protecting confidentiality means only exposing information to people who have a legitimate need to know and masking or removing sensitive details when sharing reports. Redacting sensitive data and restricting access to authorized personnel keeps the report useful for those who need it while preventing unnecessary exposure. This approach follows the principle of least privilege and supports privacy protections and any applicable policies or laws governing data handling.

Sharing all details with everyone, posting reports publicly, or storing them without access controls would unnecessarily expose individuals and sensitive information, creating risk of harm or misuse and potential policy violations. Those options undermine trust and safety, which is why they’re not appropriate.