Which action best addresses a potential data exposure incident?

Which action best addresses a potential data exposure incident?

• A. Delete the data and ignore.
• B. Notify no one and continue.
• C. Document the incident and wait for review.
• D. Report the incident per policy, investigate, and implement remediation with privacy training or updates as needed.

Answer: (D)

Following an official incident response process is essential when a potential data exposure occurs. The best action is to report the incident through the proper channels, document what happened, and initiate an investigation to determine what data was affected and how the exposure occurred. Then implement remediation to stop the exposure, fix any gaps, and provide privacy training or updates to policies and practices as needed. This approach promotes timely containment, accountability, and compliance with legal and organizational requirements, while reducing the risk of recurrence. Other paths leave serious gaps: ignoring the incident or deleting data without reporting can leave risks unaddressed and may violate policy or laws; delaying documentation without taking action prevents effective containment and learning, increasing potential harm.

Following an official incident response process is essential when a potential data exposure occurs. The best action is to report the incident through the proper channels, document what happened, and initiate an investigation to determine what data was affected and how the exposure occurred. Then implement remediation to stop the exposure, fix any gaps, and provide privacy training or updates to policies and practices as needed. This approach promotes timely containment, accountability, and compliance with legal and organizational requirements, while reducing the risk of recurrence.

Other paths leave serious gaps: ignoring the incident or deleting data without reporting can leave risks unaddressed and may violate policy or laws; delaying documentation without taking action prevents effective containment and learning, increasing potential harm.