When a request for information invades privacy and you cannot disclose, what is an appropriate step?

• A. Share All Information To Be Helpful.
• B. Refuse And Provide No Other Information.
• C. Explain Confidentiality Limits, Offer Alternatives, And Document The Policy-Based Reason For Withholding.
• D. Delay Indefinitely.

Answer: (C)

When information requests threaten someone's privacy, the important move is to uphold confidentiality while still being helpful. The best step is to explain the limits of what can be shared, offer safe alternatives, and document the reason for withholding based on policy or procedure.

By clearly stating why certain details cannot be disclosed, you acknowledge the request and set proper boundaries. Then you provide constructive options, such as giving a high-level summary, sharing de-identified or redacted information, or guiding the requester on how to obtain consent or access through approved channels. Finally, you record the policy-based justification for withholding, creating a clear trace for accountability and future reference.

This approach protects privacy, follows established rules, and maintains trust, while still offering useful paths forward. Sharing everything would violate privacy; refusing with nothing leaves the requester without guidance; delaying indefinitely fails to resolve the request and can harm trust and compliance.