Which approach best enforces privacy for address data?

Which approach best enforces privacy for address data?

• A. Open access for internal users
• B. Role-based access control with least-privilege grants
• C. No auditing
• D. Hard-coded access controls in code

Answer: (B)

Restricting access to address data by assigning permissions based on roles and applying the least-privilege principle is the most effective privacy approach. By grouping users into roles that match their job functions and giving each role only the minimum data and operations needed, you limit who can see or modify address information and reduce exposure when people change roles or leave. Open access for internal users would expose sensitive data broadly, increasing privacy risk. No auditing leaves you without traceability to detect or deter improper access. Hard-coded access controls in code are inflexible and hard to maintain as policies and roles evolve. Role-based access control with least-privilege grants provides scalable, maintainable, and auditable privacy protection for address data.

Restricting access to address data by assigning permissions based on roles and applying the least-privilege principle is the most effective privacy approach. By grouping users into roles that match their job functions and giving each role only the minimum data and operations needed, you limit who can see or modify address information and reduce exposure when people change roles or leave. Open access for internal users would expose sensitive data broadly, increasing privacy risk. No auditing leaves you without traceability to detect or deter improper access. Hard-coded access controls in code are inflexible and hard to maintain as policies and roles evolve. Role-based access control with least-privilege grants provides scalable, maintainable, and auditable privacy protection for address data.