Which statement about data confidentiality best describes it?

• A. Data confidentiality means sharing information only with authorized people.
• B. Data confidentiality means only authorized people can access sensitive information.
• C. Data confidentiality is the same as data protection law.
• D. Data confidentiality applies only to physical documents.

Answer: (B)

Data confidentiality means preventing unauthorized access to information; it focuses on who is allowed to view sensitive data. The statement that only authorised people can access sensitive information best captures this idea because it directly expresses the control over viewing rights and who may access the data. In practice, this is enforced through measures like strong authentication, permissions, and encryption so that only those with a legitimate need can see the data. The alternative about sharing only with authorised people feels related but centers on the act of sharing rather than who is permitted to view the data in the first place. Saying confidentiality is the same as data protection law is incorrect because confidentiality is a specific principle about access, while data protection law covers a broader set of legal requirements and rights. And limiting confidentiality to physical documents ignores the many forms of data today, including digital records and electronic communications.