How should privacy considerations affect what revenue information is disclosed to third parties?

• A. Share all information with third parties.
• B. Share only non-privileged information.
• C. Only non-privileged, public information should be shared; sensitive data should be restricted; follow policy and legal requirements.
• D. Do not share any information.

Answer: (C)

Privacy controls determine what can be shared with third parties by labeling data as public, non‑public, privileged, or confidential. The safest and most responsible approach is to disclose only information that is non-privileged and public, while keeping sensitive data restricted. You should always follow your organization's policies and applicable laws, which may require redaction, aggregation, or explicit authorization before sharing anything more sensitive. This strikes the right balance: it allows stakeholders to access information that is already appropriate to share while protecting individuals and the company from privacy breaches, contractual issues, or legal penalties. Sharing everything would risk exposing private or confidential details; sharing only non-privileged information without ensuring it’s actually public could still reveal restricted data; and withholding everything ignores legitimate, compliant disclosures that support transparency and governance.