How should confidentiality be maintained in reports?

• A. Store all confidential materials publicly accessible.
• B. Share sensitive data with all personnel.
• C. Limit access to data by privacy controls without explicit redaction.
• D. Redact sensitive data where appropriate; share only with authorized personnel.

Answer: (D)

Confidentiality in reports means protecting sensitive information by controlling who can see it and what they can see. The best approach is to redact sensitive data where appropriate and share only with authorized personnel. Redaction removes identifying or highly sensitive details (like names, addresses, or case specifics) so the material can serve its purpose without exposing individuals or operations. Pair redaction with proper access controls and a need-to-know basis, so only those with a legitimate reason and authorization can view the full, unreduced information.

Why the other options don’t fit: making confidential materials publicly accessible completely defeats confidentiality. Sharing sensitive data with all personnel ignores the need-to-know principle and raises the risk of misuse. Relying on privacy controls alone, without redaction, can still reveal sensitive information to those who have access, especially if data contains identifiers or context that could lead to disclosure.