What policy considerations govern customer information privacy and how would you handle a privacy breach on the sales floor?

• A. Follow Code of Conduct, comply with privacy policy; secure data, report breach to supervisor, document, take corrective action
• B. Delete all data and hope it doesn't happen again
• C. Publicly disclose the breach to customers immediately
• D. Wait for regulatory guidance before acting

Answer: (A)

Protecting customer information starts with following the company’s privacy policy and Code of Conduct. These guidelines set the approved ways to handle personal data, how to recognize potential breaches, and the steps to take so actions stay lawful and consistent with store expectations.

The best approach walks through a clear, responsible sequence on the floor. First, secure the data and any devices involved—log out of systems, lock or shield screens, and prevent further access to sensitive information. Then report the incident to a supervisor so the proper incident response can be activated, and keep a record of what happened and what was done. Finally, take corrective action as directed, which may include documenting the breach, supporting follow-up investigations, and implementing training or process changes to prevent recurrence. This sequence protects customers, preserves evidence, and shows accountability.

Why the other options don’t fit as well: deleting data and hoping it won’t happen again leaves exposure unresolved and may violate retention policies; publicly disclosing the breach to customers without a controlled plan can cause unnecessary panic and bypasses proper notification channels; waiting for regulatory guidance before acting delays containment and could allow the breach to worsen. In practice, quick containment, proper escalation, and documented corrective steps aligned with policy are the correct path.