nerdexam
(ISC)2

HCISPP · Question #13

According to private sector data classification levels, how would salary levels and medical information be classified?

The correct answer is C. Private. Salary and medical information are classified as Private because they are personal data belonging to individuals that organizations must protect from unauthorized disclosure - they're not secret enough to be Confidential, but too sensitive for general access. Confidential (D)…

Privacy and Security in Healthcare

Question

According to private sector data classification levels, how would salary levels and medical information be classified?

Options

  • APublic
  • BSensitive
  • CPrivate
  • DConfidential

How the community answered

(36 responses)
  • A
    14% (5)
  • B
    3% (1)
  • C
    75% (27)
  • D
    8% (3)

Explanation

Salary and medical information are classified as Private because they are personal data belonging to individuals that organizations must protect from unauthorized disclosure - they're not secret enough to be Confidential, but too sensitive for general access. Confidential (D) is wrong because that tier typically covers trade secrets, business strategies, or proprietary data that could damage the organization if leaked, not personal employee data. Sensitive (B) is a label sometimes used interchangeably with Private in some frameworks, but in standard private sector classification models, "Sensitive" often sits between Public and Private and doesn't specifically capture personally identifiable information (PII) like salaries and medical records. Public (A) is wrong because this data is explicitly restricted from open disclosure.

Memory tip: Think "P for Personal = Private" - salary and medical info are personal to the individual, so they land in the Private tier. Confidential is for company secrets, not people secrets.

Topics

#Data Classification#Privacy#Sensitive Information

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice