HCISPP · Question #13
According to private sector data classification levels, how would salary levels and medical information be classified?
The correct answer is C. Private. Salary and medical information are classified as Private because they are personal data belonging to individuals that organizations must protect from unauthorized disclosure - they're not secret enough to be Confidential, but too sensitive for general access. Confidential (D)…
Question
According to private sector data classification levels, how would salary levels and medical information be classified?
Options
- APublic
- BSensitive
- CPrivate
- DConfidential
How the community answered
(36 responses)- A14% (5)
- B3% (1)
- C75% (27)
- D8% (3)
Explanation
Salary and medical information are classified as Private because they are personal data belonging to individuals that organizations must protect from unauthorized disclosure - they're not secret enough to be Confidential, but too sensitive for general access. Confidential (D) is wrong because that tier typically covers trade secrets, business strategies, or proprietary data that could damage the organization if leaked, not personal employee data. Sensitive (B) is a label sometimes used interchangeably with Private in some frameworks, but in standard private sector classification models, "Sensitive" often sits between Public and Private and doesn't specifically capture personally identifiable information (PII) like salaries and medical records. Public (A) is wrong because this data is explicitly restricted from open disclosure.
Memory tip: Think "P for Personal = Private" - salary and medical info are personal to the individual, so they land in the Private tier. Confidential is for company secrets, not people secrets.
Topics
Community Discussion
No community discussion yet for this question.