In general industry settings, what should you do with personally identifiable information from injuries?

• A. Publicly Share PII
• B. Keep All PII Unprotected
• C. Redact or Separate PII
• D. Store PII in an Unsecured System

Answer: (C)

Protecting workers’ privacy when handling injury records is essential. Personal information tied to an injury—like names and contact details—should not be exposed unnecessarily. The best practice is to redact or separate PII so that the injury data can be analyzed for safety improvements without identifying individuals. Redacting removes identifying information from reports shared beyond those who need to know, while separating keeps PII in a secure, access-controlled system and uses de-identified data for broader reporting. This protects confidentiality, reduces the risk of misuse or stigma, and helps comply with privacy expectations and regulations. Publicly sharing PII, keeping all PII unprotected, or storing it in an unsecured system would increase privacy risks and is inappropriate.