Which practice supports the effective protection of children's information?

• A. Publish all records publicly.
• B. Store data in unencrypted formats.
• C. Implement access controls and data minimization.
• D. Share data with vendors without consent.

Answer: (C)

Protecting children's information hinges on controlling who can access data and keeping only what’s necessary. Implementing access controls means using strong authentication and authorization so that only the right people can view or modify records. Using least privilege and role-based access helps ensure staff can do their jobs without seeing everything, and regular audits catch any inappropriate access. Data minimization means collecting only the information that is truly necessary for the service, storing it only as long as needed, and securely disposing of it when no longer required. Together, these practices reduce the chance of unauthorized exposure or misuse and support safer handling of sensitive child information.

Publishing all records publicly would expose highly sensitive data and put children at risk. Storing data in unencrypted formats makes it easy for unauthorized people to read if a breach occurs. Sharing data with vendors without consent bypasses privacy protections and can violate laws and policy.