How should you handle confidential employee and customer information, and what policies protect privacy?

• A. Share confidential information with all staff for transparency.
• B. Leave confidential documents on desks during shifts.
• C. Access control, only necessary staff; secure storage; avoid discussing in public; comply with privacy laws and company policies.
• D. Ignore privacy laws to speed up operations.

Answer: (C)

Protecting confidential information comes down to control and care: only people who need the information for their job should have access, and everything else should be secured and handled according to rules and laws. This means putting in place access controls so staff can only see what’s necessary, keeping physical and digital records in secure, locked or encrypted systems, and avoiding discussing private details in public or semi-public spaces. It also means following privacy laws and the company’s policies, and receiving training on how to handle sensitive data properly.

This approach preserves trust, reduces the risk of leaks or misuse, and ensures you’re meeting legal and organizational expectations. Sharing confidential information with everyone, or leaving documents unattended on desks, creates unnecessary exposure and invites trouble. Ignoring privacy laws is not only unethical but exposes the organization to legal consequences.