What steps should be taken when sensitive information outside the case is discovered?

What steps should be taken when sensitive information outside the case is discovered?

• A. Do not disclose; segregate and secure; escalate to supervisor if necessary; follow privacy rules
• B. Post on social media
• C. Share with all stakeholders
• D. Delete without escalation

Answer: (A)

When sensitive information outside the case is discovered, the priority is to limit exposure and handle it through proper channels. Do not disclose it to anyone who shouldn’t see it. Segregate and secure the information to prevent further access, and escalate to your supervisor or the designated privacy/security authority to determine the appropriate next steps while following privacy rules and organizational policies. This approach protects confidentiality, supports regulatory compliance, and keeps incident response organized. Posting on social media or sharing with all stakeholders would spread the information beyond its permitted scope and breach confidentiality. Deleting it without escalation risks losing important evidence and violating policy, which can hinder a proper response.

When sensitive information outside the case is discovered, the priority is to limit exposure and handle it through proper channels. Do not disclose it to anyone who shouldn’t see it. Segregate and secure the information to prevent further access, and escalate to your supervisor or the designated privacy/security authority to determine the appropriate next steps while following privacy rules and organizational policies. This approach protects confidentiality, supports regulatory compliance, and keeps incident response organized.

Posting on social media or sharing with all stakeholders would spread the information beyond its permitted scope and breach confidentiality. Deleting it without escalation risks losing important evidence and violating policy, which can hinder a proper response.