Which data handling practice minimizes sharing of sensitive information?

• A. Share with all staff to enhance transparency.
• B. Keep data on personal devices.
• C. Minimize sharing and implement access controls.
• D. Post data publicly.

Answer: (C)

Minimizing exposure of sensitive information by limiting who can access it and enforcing controls is the safest approach. This follows the principle of least privilege: people should see only what they need for their role and only when necessary. When sharing is kept to a minimum and access rights are tightly managed, the chances of accidental disclosure or misuse drop, and you can more easily track who handled what data.

Sharing with all staff greatly increases the potential audience for sensitive data, raising the risk of leaks. Keeping data on personal devices introduces security gaps—devices may be lost, not properly secured, or outside the organization’s control. Posting data publicly would expose sensitive information to anyone, defeating confidentiality entirely. In practice, apply data classification, implement role-based access controls, and keep sensitive data protected and auditable.