Which action demonstrates privacy compliance when handling personal information?

• A. Share personal data with partners without consent.
• B. Apply data minimization and proper access controls.
• C. Store data indefinitely without review.
• D. Publish datasets with identifiers.

Answer: (B)

Privacy compliance hinges on limiting what you collect and who can access it. Applying data minimization and proper access controls directly reduces risk by ensuring you gather only what’s truly needed for the stated purpose and restrict exposure to those who need to work with the data. Data minimization means choosing the smallest scope of data necessary and keeping retention aligned with purpose, while proper access controls enforce who can view or modify the data through authenticated logins, role-based permissions, and the principle of least privilege. Together, these practices promote accountability and protect individuals’ information from unnecessary exposure.

Sharing personal data with partners without consent undermines consent and purpose limitation, which are fundamental to privacy rules. Storing data indefinitely without review conflicts with retention policies and increases the chance of misuse or breach. Publishing datasets with identifiers risks re-identification and directly harms privacy.