Which practice supports confidentiality in electronic records while enabling appropriate data sharing?

• A. Enforcing access controls and policies.
• B. Posting all data publicly
• C. Storing data on personal devices
• D. Releasing data without consent

Answer: (A)

Access controls and policies are the mechanism that keeps electronic records confidential while allowing sharing when appropriate. By requiring authentic login and granting access only to those with a legitimate need, organizations implement the principle of least privilege so individuals see only the information necessary for their role. Policies formalize who can access what data, under which circumstances, and how data can be shared or disclosed, including consent management and data-sharing agreements. Together, they create a secure framework that protects privacy, supports accountability through audit trails, and enables collaboration or oversight without exposing sensitive information to unauthorized people.

Other options would undermine confidentiality: making all data public exposes sensitive information; storing data on personal devices introduces security and control risks; releasing data without consent disregards privacy and legal requirements.