How should medical records be stored to protect privacy?

• A. Store in secure files
• B. Store in a lockable cabinet with limited access
• C. Email to all staff
• D. Leave on desk

Answer: (B)

Protecting privacy means controlling who can see medical information. For physical records, the essential step is restricting access to authorized people and securing the records from theft or exposure. A lockable cabinet with limited access provides a clear physical barrier and an auditable point of access, making it a straightforward and enforceable way to protect sensitive data. It aligns with privacy requirements by ensuring that only those who need to handle the records can reach them.

Emailing records to all staff would spread confidential information beyond those who need it, creating a major breach of confidentiality. Leaving records on a desk leaves them completely exposed to anyone who passes by. Storing in secure files could be helpful if those files are truly secured with proper access controls, but the lockable cabinet with restricted access is the simplest, most reliable standard for protecting privacy in many settings.