How should sensitive member data be stored and who is allowed access?

• A. In open systems with no access restrictions.
• B. On a public drive accessible to all members.
• C. In secure systems with restricted access; only authorized officers or roles with a need to know.
• D. Only in printed form.

Answer: (C)

Sensitive member data should be stored in secure systems with access restricted to those who need to know. This means applying strong access controls such as role-based permissions, proper authentication, and encryption for data at rest and in transit, along with logs and regular reviews to ensure only authorized roles (the people who truly need access) can view the information. This approach protects confidentiality, reduces the risk of data breaches, and provides an audit trail for accountability.

Storing data in open systems, on a public drive, or only in printed form fails to provide adequate control and protection. Open systems and public drives can be accessed by more people than appropriate, and printed records are easy to lose, steal, or damage.