Under what constraints should confidential information be handled?

• A. Personal discretion.
• B. Applicable laws and organizational policies.
• C. No constraints to ensure fast results.
• D. Only state laws.

Answer: (B)

Confidential information should be handled under constraints defined by applicable laws and organizational policies. This pairing ensures compliance with privacy and security requirements while providing concrete rules for who can access information, how it is stored, transmitted, and disposed of, and how breaches are reported. Relying on personal discretion is unsafe because it creates inconsistency and elevates the risk of inadvertent disclosure. Limiting guidance to state laws alone can miss federal or international requirements and internal standards, so organizational policies are essential to translate legal requirements into practical, day-to-day procedures.