In handling privacy with sensitive guest information, which practice is correct?

• A. Share guest information with any staff member who asks
• B. Share only with relevant teammates and follow policy
• C. Do not share guest information and protect payment data
• D. Post guest payment data publicly

Answer: (C)

Protecting guest privacy means keeping sensitive information confidential and handling payment data securely. The best practice is to not share guest information and to safeguard payment data, because this minimizes exposure to risk and follows policy, preserving guest trust. Sharing information with staff who ask or only with some teammates can reveal more than is necessary and isn’t as protective as restricting access. Posting payment data publicly is clearly a violation of privacy and security. Following the policy and keeping sensitive information restricted to what’s necessary is the right way to handle guest privacy and security.