If a dataset contains identifying codes and is stored with limited access and encryption, which protection is primarily in use?

If a dataset contains identifying codes and is stored with limited access and encryption, which protection is primarily in use?

• A. Informed consent
• B. Privacy
• C. Confidentiality
• D. Anonymization

Answer: (C)

Protecting data from unauthorized disclosure is what confidentiality is all about. When a dataset includes identifying codes, the information could reveal who the data belongs to if it’s seen by the wrong people. Limiting access and using encryption are classic confidentiality controls—they keep the data readable only by people who have proper authorization and the right keys, reducing the risk of exposure even if someone attempts to access the storage or transmission channels. Informed consent isn’t about keeping information secret; it’s about obtaining permission from participants for how their data will be used. Privacy is a broader notion about individuals’ rights to control personal information, but the specific protection described here—restricting who can access the data and encrypting it to prevent disclosure—relates to confidentiality. Anonymization would remove identifiers so the data can’t be linked to individuals, which isn’t the case since identifying codes are present.

Protecting data from unauthorized disclosure is what confidentiality is all about. When a dataset includes identifying codes, the information could reveal who the data belongs to if it’s seen by the wrong people. Limiting access and using encryption are classic confidentiality controls—they keep the data readable only by people who have proper authorization and the right keys, reducing the risk of exposure even if someone attempts to access the storage or transmission channels.

Informed consent isn’t about keeping information secret; it’s about obtaining permission from participants for how their data will be used. Privacy is a broader notion about individuals’ rights to control personal information, but the specific protection described here—restricting who can access the data and encrypting it to prevent disclosure—relates to confidentiality. Anonymization would remove identifiers so the data can’t be linked to individuals, which isn’t the case since identifying codes are present.