Which approach best protects sensitive counseling notes when an inmate requests access?

• A. Give access to family members.
• B. Share with other staff on a need-to-know basis but not others.
• C. Post publicly in inmate portal.
• D. Use secure, need-to-know access controls and encrypted storage with audit trails.

Answer: (D)

The main idea here is protecting confidentiality while meeting a legitimate inmate request. Sensitive counseling notes contain private information about mental health, safety, and personal history, so they must be guarded with strong access controls, secure storage, and clear records of who handles them.

The best approach uses secure, need-to-know access controls, encrypted storage, and audit trails. This means only staff with a verified, job-related reason can view the notes, the files are stored in a way that prevents reading without proper authorization (encryption), and every access or action is logged so there is accountability. Together, these elements minimize the risk of improper disclosure, protect the inmate’s privacy, and support compliance with information-protection standards.

Why the other options don’t fit as well: giving access to family members bypasses privacy protections and could pose safety and security concerns. Sharing with other staff on a need-to-know basis but without formal controls and tracking can lead to inconsistent protections and makes it harder to prove accountability. Posting publicly in an inmate portal would expose highly sensitive information to many unauthorized readers, violating confidentiality and safety policies.