How should PREA records be safeguarded?

• A. Access is unrestricted to all staff.
• B. Records should be stored in unsecured locations.
• C. Limit access to authorized personnel, securely store records, and protect data from tampering or unauthorized disclosure.
• D. Disclose records publicly to enhance transparency.

Answer: (C)

Safeguarding PREA records means protecting the privacy, integrity, and confidentiality of sensitive information by controlling who can access them, where they are stored, and how they are protected from tampering or disclosure. Access should be limited to authorized personnel with a legitimate need to know, using policies like least-privilege access and proper identity verification. Records must be stored securely, whether in locked physical spaces or in encrypted digital systems, with clear procedures for retention and secure destruction when appropriate. Additional protections include keeping detailed audit trails, monitoring access, and implementing safeguards to prevent tampering or unauthorized sharing. Keeping records accessible to all staff or storing them in unsecured locations would compromise confidentiality and safety, and publicly disclosing records would violate privacy and policy requirements.