Which option best describes privacy protection for client information?

• A. Public sharing with no controls.
• B. Secure storage with access controls, encryption where digital, and compliance with privacy policies.
• C. Personal devices for storage without policies.
• D. Share with partners to ensure transparency.

Answer: (B)

Protecting client information relies on a mix of safeguards that control who can access data, keep it secure, and ensure we follow established rules. Secure storage means data is kept in systems designed to guard against breaches and maintain integrity. Access controls limit visibility and use to authorized people, often using role-based permissions and strong authentication. Encryption protects digital data both while it is stored and while it’s transmitted, so even if data is accessed by someone unauthorized, it remains unreadable. Compliance with privacy policies ties everything together by requiring we follow rules about how data is collected, used, shared, retained, and destroyed, plus any relevant laws or regulations. When these pieces work together, client information stays private and protected.

Other options miss essential protections: sharing data publicly with no controls exposes information to everyone and violates privacy; storing information on personal devices without policies creates unmanaged risk and potential leaks; sharing with partners without proper safeguards and governance can breach confidentiality and privacy obligations.