Which scenario constitutes both a breach of confidentiality and a violation of subjects' privacy?

Which scenario constitutes both a breach of confidentiality and a violation of subjects' privacy?

• A. A researcher discloses aggregated data to a third party without consent.
• B. A faculty member makes identifiable data about sexual behavior available to graduate students, although the subjects were assured that the data would be de-identified.
• C. The data are de-identified and securely stored.
• D. The subject's data are protected by confidentiality agreements.

Answer: (B)

Confidentiality and privacy hinge on controlling who sees personal, sensitive information and ensuring that promises about protecting that information are kept. When identifiable data about someone’s sexual behavior is shared with graduate students, and there was an assurance that the data would be de-identified, two problems occur. First, confidentiality is breached because information that was meant to be kept within a limited circle or under a specific consent arrangement is disclosed to others without proper authorization. Second, privacy is violated because identifiable, sensitive information about a person’s sexual behavior is exposed, contravening the participant’s expected control over their personal data and the commitment to remove identifying details. Even how the data are labeled or framed doesn’t excuse the sharing, since the subjects were told the data would be de-identified. In contrast, data that are truly de-identified and securely stored protect both confidentiality and privacy, and data shared only in aggregated form typically respects privacy if no individuals can be identified. confidentiality agreements likewise serve to protect information rather than expose it.

Confidentiality and privacy hinge on controlling who sees personal, sensitive information and ensuring that promises about protecting that information are kept. When identifiable data about someone’s sexual behavior is shared with graduate students, and there was an assurance that the data would be de-identified, two problems occur. First, confidentiality is breached because information that was meant to be kept within a limited circle or under a specific consent arrangement is disclosed to others without proper authorization. Second, privacy is violated because identifiable, sensitive information about a person’s sexual behavior is exposed, contravening the participant’s expected control over their personal data and the commitment to remove identifying details. Even how the data are labeled or framed doesn’t excuse the sharing, since the subjects were told the data would be de-identified.

In contrast, data that are truly de-identified and securely stored protect both confidentiality and privacy, and data shared only in aggregated form typically respects privacy if no individuals can be identified. confidentiality agreements likewise serve to protect information rather than expose it.