A learner’s confidential record must be shared for a legitimate educational purpose. Which practice is most appropriate?

Correct answer: Share relevant information only with staff who need it. Sharing only relevant information with the staff who need it protects confidentiality while serving the educational purpose.

• Provide the complete record to all subject teachers. Giving the complete record to all subject teachers goes beyond what is needed.
• Circulate a broad summary to staff without checking need. Circulating a summary without checking need still discloses more than necessary.
• Place the file on a shared drive accessible to all employees. A shared drive open to all employees gives uncontrolled access to a confidential record.