How is confidentiality of sensitive information handled?

• A. By policy requiring confidentiality and secure handling of records and communications.
• B. By allowing anyone to access sensitive information with proper clearance.
• C. By posting all minutes publicly with no restrictions.
• D. By deleting all sensitive information after use, with no policy.

Answer: (A)

Confidentiality is protected by formal policies and procedures that control who can access sensitive information and how it is stored, transmitted, and disposed of. The best choice describes having a policy that requires confidentiality and secure handling of records and communications, which is exactly how organizations keep sensitive data protected. It sets clear expectations, enforces access controls, and guides secure practices like restricted access, encryption, secure storage, and proper disposal.

The other ideas don’t fit because they either loosen or remove safeguards: broad access with vague clearance can expose information to the wrong people; posting minutes publicly eliminates protection for sensitive content; and deleting sensitive information after use without any policy ignores the need for proper retention, accountability, and ongoing protection.