What is a best practice for protecting client privacy when a laptop containing records is used for legitimate purposes?

• A. Use encryption and ensure access controls.
• B. Copy files to USB drive and give to anyone who asks.
• C. Leave laptop unlocked.
• D. Share login details with colleagues.

Answer: (A)

Protecting client privacy on a laptop used for legitimate work hinges on making sure client information remains unreadable to anyone who shouldn’t see it and that only authorized people can access it. The best approach is to use encryption for data at rest and implement solid access controls. Full-disk encryption protects the entire device so that if it’s lost or stolen, the records aren’t exposed without the proper authentication. Strong access controls—unique user accounts, role-based permissions, and often multi-factor authentication—restrict who can open files and use the laptop, while automatic screen locking helps prevent casual viewing when the device is unattended. Together, these practices create a robust safeguard that supports ethical duties to protect confidentiality and comply with legal requirements.

Options that involve copying files to a USB drive and giving them to anyone, leaving the laptop unlocked, or sharing login details would bypass or weaken these safeguards, increasing the risk of unauthorized access and violating confidentiality and accountability standards.