How should data privacy be handled in the exam environment?

• A. Collect only necessary data; store securely; anonymize when reporting
• B. Collect all possible data for future use
• C. Share identifiable data with peers for transparency
• D. Store unencrypted on personal devices

Answer: (A)

In an exam environment, data privacy hinges on data minimization, secure storage, and de-identification when reporting. Only collect data that’s truly needed to run the exam and verify results, reducing the amount of sensitive information at risk. Keep that data protected with strong security measures—encrypt it, control who can access it, and track access to detect any misuse. When you need to share results or analyze outcomes, anonymize or de-identify the data so individuals can’t be identified.

This is why the best approach is to collect only what’s necessary, store it securely, and anonymize when reporting. Collecting everything possible unnecessarily increases risk and complicates compliance. Sharing identifiable data with peers violates confidentiality and can lead to misuse. Storing unencrypted data on personal devices is highly insecure and leaves information exposed. The recommended practice minimizes risk while still supporting exam administration and legitimate reporting needs.