What is a proper practice when handling privacy-sensitive information?

• A. Share with all staff.
• B. Post publicly.
• C. Limit access to records and redact sensitive data as required.
• D. Discuss with media.

Answer: (C)

Protecting privacy-sensitive information means restricting access to those who truly need it and masking or removing identifying details when sharing records. Limiting access and redacting sensitive data as required embodies this approach by reducing the risk of accidental exposure while still allowing legitimate use of the information. Sharing with all staff, posting publicly, or discussing with the media would broaden exposure and violate confidentiality, potentially breaching laws, policies, and trust.