What is a best practice to protect client privacy in record keeping?

• A. Store records in an unlocked location.
• B. Share passwords with colleagues.
• C. Encrypt or lock records; limit access to authorized personnel.
• D. Post summaries on public boards.

Answer: (C)

Protecting client privacy in record keeping hinges on securing information and controlling who can see it. The best practice is to encrypt digital records or lock physical files and limit access to those who are authorized. Encryption keeps data safe even if a device is stolen or breached, while locking physical records prevents unauthorized viewing when they’re not in use. Limiting access to authorized personnel follows the principle that people should only see information necessary for their role, and each person should use their own secure login rather than sharing passwords. These measures collectively reduce the risk of exposure due to theft, loss, or careless handling and help meet privacy obligations. Practices like keeping records in an unlocked area, sharing passwords, or posting summaries publicly would clearly expose sensitive information and undermine confidentiality.