Handling Sensitive or Confidential Business Information

Are you exercising appropriate due care when handling sensitive or confidential business information?

• Limit access to and disclosure of sensitive or confidential information to only those individuals with a specific business need.

• Consider the environment and your surroundings before viewing, accessing, or discussing sensitive or confidential information. Public or open spaces increase the risk of prying eyes and ears.

• Limit the use of physical or hard copies when possible. Instead, access sensitive or confidential information digitally on properly secured and protected devices and systems.

• When accessing sensitive or confidential information on digital systems, be certain to sign off and/or secure the device to prevent unauthorized access when stepping away.

• Avoid using public or shared devices to access sensitive or confidential information and/or digital systems containing sensitive or confidential information.

• If physical or hard copies are necessary, secure those documents appropriately. Don’t leave those documents lying in the open.

• Avoid using printers in a public or open space to print physical or hard copies of sensitive or confidential information. Business leaders should carefully consider printing needs for individuals and teams who frequently print sensitive or confidential information (read: assign a dedicated printer to those individuals or teams accordingly).

• Pick up / secure printouts containing sensitive or confidential information immediately.

• If physical or hard copies of sensitive or confidential information are no longer required, properly dispose of (generally, shred) those documents accordingly. Be certain to observe / follow any retention requirements accordingly.

• Educate those who are privy to sensitive or confidential business information on the proper handling and dissemination of such information including exercising appropriate due care and adopting best practices.

• Handle sensitive or confidential business information with the same (or greater) reasonable care as you would your own information. Don’t unnecessarily or negligently risk compromising sensitive or confidential business information.