Wilson Enterprises Academy Employee Onboarding & Workplace Policies Practice Test

Protecting customer and employee records relies on four intertwined elements: controlling who can access data, protecting the data itself, having a plan to respond to breaches, and staying compliant with privacy laws. Limiting access to the minimum needed (least privilege) reduces who can view sensitive information and lowers risk if credentials are compromised. Encrypting data guards it even if someone gains access, because unreadable data isn’t usable without the proper keys. Breach notification procedures ensure timely communication to affected individuals and authorities, satisfying legal obligations and helping manage incidents effectively. Compliance with privacy laws keeps the organization aligned with requirements for how data must be handled, stored, and shared.

The other options fall short because they omit important safeguards: sharing access with all staff defeats least privilege; no encryption leaves data vulnerable to exposure; and breach notification alone doesn’t prevent problems and misses the essential protective measures that encryption, access controls, and legal compliance provide.