Which approach best governs the handling of customer information to ensure privacy?

• A. Publish data in a public dashboard to improve transparency.
• B. Store data in unsecured personal devices.
• C. Share employee data with colleagues who request it.
• D. Maintain confidentiality, limit access to necessary data, and secure transmissions.

Answer: (D)

Protecting customer information relies on keeping data confidential, restricting access to only what is needed, and ensuring data is protected during transmission. When privacy is treated as a responsibility—data is kept secret, access is granted on a need-to-know basis, and communications are encrypted—customer information stays protected from exposure both when it’s stored and when it’s moved between systems or people. This approach embodies data minimization, least-privilege access, and secure communications, which together reduce the chances of accidental disclosures or interception.

Publishing data publicly would reveal private details and erode trust. Storing data on unsecured personal devices creates vulnerable, uncontrolled repositories. Sharing employee data with anyone who requests it bypasses proper authorization and can expose information beyond what is appropriate.