Which statement is true about the log's confidentiality?

Which statement is true about the log's confidentiality?

• A. It may be publicly shared if requested
• B. It must be recorded and maintained to protect confidentiality
• C. It should include social security numbers for verification
• D. It should be kept for 5 years and then shredded

Answer: (B)

Confidentiality means safeguarding sensitive information so that only authorized people can access it. For a log, this means there should be a documented, controlled process for who can access it, how it’s stored, and how it’s kept accurate over time. The statement that the log must be recorded and maintained to protect confidentiality captures this idea directly—it emphasizes creating an official record and actively managing it to prevent improper disclosure and ensure data integrity. Public sharing would violate confidentiality, and including sensitive identifiers like social security numbers is inappropriate for a log. Keeping the log for a fixed period and shredding it touches on retention and disposal policies, which are related but separate from the ongoing protection of confidentiality; the core practice is maintaining proper control over the log to protect the information it contains.

Confidentiality means safeguarding sensitive information so that only authorized people can access it. For a log, this means there should be a documented, controlled process for who can access it, how it’s stored, and how it’s kept accurate over time. The statement that the log must be recorded and maintained to protect confidentiality captures this idea directly—it emphasizes creating an official record and actively managing it to prevent improper disclosure and ensure data integrity.

Public sharing would violate confidentiality, and including sensitive identifiers like social security numbers is inappropriate for a log. Keeping the log for a fixed period and shredding it touches on retention and disposal policies, which are related but separate from the ongoing protection of confidentiality; the core practice is maintaining proper control over the log to protect the information it contains.