Which statement best describes licensees' privacy duties?

Which statement best describes licensees' privacy duties?

• A. Collect all possible information, store it in plain text, and share with any party.
• B. Destroy data as soon as possible.
• C. Collect only necessary information, secure storage, limit sharing to required parties, comply with privacy laws, and destroy or anonymize when appropriate.
• D. Ignore privacy laws.

Answer: (C)

Protecting client information is a fundamental duty. Licensees must handle personal data with care: collect only what’s necessary to complete the transaction, store it securely, share it only with parties who truly need to know, follow privacy laws, and destroy or anonymize data when it’s no longer needed. This approach minimizes risk and respects clients’ rights to confidentiality. Why this is best: it covers the full scope of privacy responsibilities in practice—data minimization (only collecting what’s needed), security (protecting information from unauthorized access), controlled disclosure (sharing only with those essential to the process), legal compliance (following applicable privacy laws), and data disposal (destroying or anonymizing when appropriate). Why the other options don’t fit: collecting everything and sharing with anyone violates confidentiality and increases risk; destroying data immediately without considering purpose and retention needs is impractical and incomplete; ignoring privacy laws is not just wrong, it’s illegal.

Protecting client information is a fundamental duty. Licensees must handle personal data with care: collect only what’s necessary to complete the transaction, store it securely, share it only with parties who truly need to know, follow privacy laws, and destroy or anonymize data when it’s no longer needed. This approach minimizes risk and respects clients’ rights to confidentiality.

Why this is best: it covers the full scope of privacy responsibilities in practice—data minimization (only collecting what’s needed), security (protecting information from unauthorized access), controlled disclosure (sharing only with those essential to the process), legal compliance (following applicable privacy laws), and data disposal (destroying or anonymizing when appropriate).

Why the other options don’t fit: collecting everything and sharing with anyone violates confidentiality and increases risk; destroying data immediately without considering purpose and retention needs is impractical and incomplete; ignoring privacy laws is not just wrong, it’s illegal.