What practices support secure handling of client information in wellness coaching?

• A. Sharing with anyone who asks
• B. Use confidential records, secure storage, and limit access; obtain consent
• C. Storing on personal devices without consent
• D. Collecting unnecessary data

Answer: (B)

Protecting client information hinges on treating records as confidential, using secure storage, restricting access, and obtaining informed consent for any disclosure. When notes, intake forms, and other data are kept in confidential records and stored securely—whether digitally with encryption and strong passwords or physically in locked cabinets with access controls—the risk of a data breach or accidental exposure drops significantly. Limiting access to those who need the information for legitimate reasons, and keeping access logs, helps ensure that only authorized teammates, supervisors, or relevant professionals can view sensitive details. Obtaining consent means clearly explaining what data is collected, how it will be used, who it may be shared with, and for what purposes, and securing written permission before sharing or using information beyond the agreed scope. This approach builds trust with clients, meets ethical obligations, and aligns with common privacy and data-protection expectations.

Sharing information with anyone who asks bypasses confidentiality and erodes trust. Storing client information on personal devices without consent introduces substantial security risks and violates professional boundaries. Collecting more data than is needed increases exposure without corresponding benefit and undermines data minimization principles.