A customer requests sensitive information. What should you do?

• A. Share info
• B. Refuse completely
• C. Verify authorization before sharing
• D. Post on social

Answer: (C)

When sensitive information is requested, the priority is protecting privacy by confirming the requester is authorized to receive it. Verifying authorization before sharing ensures you disclose information only to someone who has the legitimate right to access it, reducing the risk of identity theft or data breach.

If the requester is verified as authorized, share only the minimum information needed and do so through secure channels, and note the verification steps for accountability. If you cannot verify authorization, do not disclose anything.

Sharing information without verification breaches confidentiality and can lead to serious consequences; refusing completely ignores legitimate, policy-based requests; posting on social media is an inappropriate and unsafe way to handle sensitive data.