Which measure is included in protecting confidential patient data in physical and digital forms?

• A. Leaving unencrypted records on open shelves.
• B. Sharing login credentials with colleagues to speed up care.
• C. Access controls, encryption, secure storage, disposal, and staff training on privacy.
• D. Printing copies of all records for every department.

Answer: (C)

Protecting confidential patient data in both physical and digital forms relies on a layered set of controls that work together. Access controls limit who can view information; encryption protects data so it remains unreadable if intercepted or stolen; secure storage keeps physical records safe from theft or tampering; proper disposal ensures records are destroyed securely so they can’t be recovered; and staff training on privacy ensures everyone understands how to handle information responsibly. This combination covers both kinds of data and helps maintain confidentiality across the entire workflow.

The other options undermine privacy: leaving unencrypted records on open shelves makes physical data easily accessible; sharing login credentials bypasses access controls and exposes data to unauthorized users; and printing copies of all records for every department creates unnecessary exposures and waste.