When documenting a medical-related communication, which principle should be applied to protect privacy?

• A. Redact or limit personal health information to those with a need to know; store logs securely
• B. Post all health details publicly for transparency
• C. Include more data than necessary to ensure completeness
• D. Share health data with non-authorized staff to speed process

Answer: (A)

Protecting privacy hinges on limiting access to personal health information to those who truly need it and keeping records secure. This is done by redacting or restricting PHI to authorized personnel and storing logs in a secure way so only the right people can see them. The other options would expose sensitive information: posting health details publicly breaks confidentiality, including more data than necessary increases risk, and sharing with non-authorized staff violates the need-to-know principle and can lead to improper disclosures.