How should confidential or sensitive information be protected in 400-series reports?

• A. Share with all personnel.
• B. Do nothing different.
• C. Limit access, redact sensitive data, and follow secure handling procedures.
• D. Post publicly.

Answer: (C)

Protecting confidential or sensitive information in 400-series reports means handling the material so that only people who truly need the information can access it, removing or masking details that could reveal identities or jeopardize investigations, and sticking to secure processes throughout creation, sharing, and storage.

Limiting access ensures that information stays within the circle of authorized personnel—those directly involved in the case or who have a legitimate need to know. Redacting sensitive data before sharing prevents exposing identities or specifics that could put victims, witnesses, informants, or ongoing investigations at risk. Following secure handling procedures covers secure storage (locked files or encrypted digital systems), protected transmission (encrypted email or secure portals), proper copying and printing controls, and proper disposal when the information is no longer needed.

These practices are essential because careless sharing or leaving data unprotected can compromise investigations, violate privacy rights, and expose individuals to harm. The other options fail to protect privacy and security: sharing with all personnel broadens access beyond necessity; doing nothing differently ignores established safeguards; posting publicly would expose sensitive information to anyone and undermine safety and justice.

In practice, always review reports for what needs redaction, apply access controls, use approved secure channels, and follow your agency’s retention and disposal rules.