Which data-practice best aligns with privacy laws in customer service?

• A. Collect only what’s needed, protect data, disclose usage, and comply with privacy laws.
• B. Collect any data that could help sales without disclosure.
• C. Share customer data with partners without consent.
• D. Store data indefinitely regardless of necessity.

Answer: (A)

Privacy in customer service centers on collecting only what’s needed, protecting that data, being clear about how it will be used, and following applicable laws. When you gather only the information necessary to help the customer, you reduce risk and keep processes efficient. Strong safeguards—like access controls, encryption, and secure storage—protect sensitive details from unauthorized access. Transparent disclosure about data use—shown in simple privacy notices and at the time of collection—lets customers understand why their information is needed and how it will be used. And complying with privacy laws ensures you follow required rules on consent, purpose limitation, data subject rights, and retention.

The alternative of collecting any data that could help sales without disclosure conflicts with purpose limitation and consent, undermining trust and legal compliance. Sharing customer data with partners without consent breaches confidentiality and legal requirements. Storing data indefinitely disregards retention limits and increases risk without added benefit.