Which of the following represents a privacy-compliant practice?

• A. Disclose personal information to any partner without consent.
• B. Share debtor information with telemarketing partners.
• C. Withhold all information from the consumer.
• D. Limit dissemination of personal information to authorized individuals and implement access controls.

Answer: (D)

Protecting personal information by restricting access and sharing only with authorized personnel. This practice aligns with privacy requirements by ensuring that data is disclosed only to people who need it for legitimate purposes and that proper safeguards are in place to prevent unauthorized access. Limiting dissemination to authorized individuals and implementing access controls reduces the risk of data breaches and misuse, which is at the heart of privacy-compliant handling.

Disclosing personal information to any partner without consent, or sharing debtor information with telemarketing partners, would extend access beyond those who have a legitimate need and appropriate consent, violating privacy norms and likely regulatory rules. Withholding all information from the consumer prevents them from exercising their rights and verifying or disputing data about themselves, which is not in line with standard privacy and fair-debt-practice expectations.