Which practice supports privacy in visitor management?

Which practice supports privacy in visitor management?

• A. Publishing visitor lists
• B. Limiting access to visitor data to authorized personnel
• C. Collecting unnecessary personal data
• D. Retaining data indefinitely without policy

Answer: (B)

Protecting privacy in visitor management hinges on controlling who can see and use visitor information. Limiting access to visitor data to authorized personnel puts the least-privilege principle into action: only people with a legitimate need can access the information. This reduces exposure, lowers the chance of mishandling or leaks, and makes it easier to track who has viewed or changed records. In practice, assign clear roles, require authentication, and ensure access rights can be revoked when no longer needed. Store data securely and enforce a sensible retention policy so information isn’t kept longer than necessary. Publishing visitor lists would expose private information to many people. Collecting unnecessary personal data increases privacy risk and burden. Retaining data indefinitely without a policy leads to over-collection and greater vulnerability to breaches.

Protecting privacy in visitor management hinges on controlling who can see and use visitor information. Limiting access to visitor data to authorized personnel puts the least-privilege principle into action: only people with a legitimate need can access the information. This reduces exposure, lowers the chance of mishandling or leaks, and makes it easier to track who has viewed or changed records. In practice, assign clear roles, require authentication, and ensure access rights can be revoked when no longer needed. Store data securely and enforce a sensible retention policy so information isn’t kept longer than necessary.

Publishing visitor lists would expose private information to many people. Collecting unnecessary personal data increases privacy risk and burden. Retaining data indefinitely without a policy leads to over-collection and greater vulnerability to breaches.