Which practice supports privacy during training?

• A. Redact PII and Limit Sharing
• B. Post PII Publicly
• C. Keep Records Unprotected
• D. Share with External Vendors Without Consent

Answer: (A)

Protecting privacy during training hinges on limiting exposure of personal information. Redacting PII and limiting sharing directly reduce who can see sensitive data and what data is exposed. Redacting PII means removing or obscuring identifiers such as names, addresses, phone numbers, social security numbers, or any detail that could reveal someone’s identity in training materials and datasets. Limiting sharing applies the need-to-know principle, ensuring only authorized individuals involved in the training can access the information and only for legitimate purposes. When possible, using de-identified or synthetic data further protects privacy and consent should be obtained when required. Posting PII publicly would violate privacy, keeping records unprotected creates risk of unauthorized access, and sharing with external vendors without consent breaches privacy and can violate laws.