Which practice aligns with PII handling guidance?

• A. Minimize the use, collection, and retention of PII to what is strictly necessary
• B. Store all PII indefinitely
• C. Share PII with any third party without notice
• D. Publicly display PII on websites

Answer: (A)

Minimizing PII handling keeps only what’s truly necessary for a defined purpose, which reduces the amount of sensitive data at risk and makes compliance and security easier to manage. By collecting only what you need, using it only for legitimate purposes, and retaining it only as long as necessary, you limit exposure, simplify access controls, and support proper data disposal. This is a fundamental privacy-and-security practice that helps reduce breach impact and eases audits.

Storing PII indefinitely increases risk and often violates data retention norms. Sharing PII with third parties without notice bypasses transparency and consent requirements. Publicly displaying PII exposes individuals and breaches confidentiality.