How should confidential records be handled under Class 314?

• A. Access limited to authorized personnel; kept secure and disclosed only as permitted by law.
• B. Publicly available to all employees.
• C. Shared with vendors only.
• D. Archived without security.

Answer: (A)

Confidential records must be handled with restricted access and solid security to protect privacy and comply with legal requirements. In practice, only people who have a legitimate need to know the information should be able to access these records, and they must be kept secure whether they’re in paper form (locked cabinets, restricted areas) or in digital systems (password protections, encryption, access controls). Disclosure should occur only as permitted by law or with proper authorization, such as patient or client consent or a court order, and every release should be documented and governed by applicable policies. This approach minimizes the risk of unauthorized viewing or sharing, supports accountability through audit trails and retention/destruction procedures, and ensures that sensitive information is protected throughout its life cycle. Public access to confidential records would violate privacy and policy, while sharing broadly or archiving without security would fail to safeguard the information.