CPR Records Management & Confidentiality 2 — Questions and Answers
Question 1: What is the purpose of a chain of custody log when handling sensitive documents?
- To record postage costs for mailing important documents
- To document every person who has handled or accessed a specific record (Correct answer)
- To track how many copies of a document have been made
- To schedule when documents should be moved to off-site storage
Correct answer: To document every person who has handled or accessed a specific record
A chain of custody log creates an auditable record of everyone who has accessed or handled a sensitive document, ensuring accountability and supporting legal defensibility.
Question 2: Which filing system is considered most appropriate for storing confidential personnel records?
- Open-shelf filing visible to all office staff
- Color-coded lateral filing accessible to the general office area
- Locked cabinets in a restricted area with access limited to authorized personnel (Correct answer)
- Digital files stored on a shared public network drive
Correct answer: Locked cabinets in a restricted area with access limited to authorized personnel
Confidential personnel records must be secured in locked storage in a restricted area accessible only to authorized individuals to prevent unauthorized access.
Question 3: What is the key difference between active records and inactive records?
- Active records are stored digitally; inactive records are stored on paper
- Active records are referenced regularly for current business; inactive records are rarely accessed but must still be retained (Correct answer)
- Active records belong to current employees; inactive records belong to former employees
- Active records have been approved; inactive records are pending review
Correct answer: Active records are referenced regularly for current business; inactive records are rarely accessed but must still be retained
Active records are those currently in use for day-to-day operations, while inactive records are no longer needed for daily work but must be kept for legal, regulatory, or historical reasons.
Question 4: When disposing of confidential paper records that have reached the end of their retention period, the recommended method is:
- Placing them in a locked dumpster outside the building
- Recycling them through the standard office recycling bin
- Shredding or using a certified secure destruction service (Correct answer)
- Returning them to the original sender for disposal
Correct answer: Shredding or using a certified secure destruction service
Confidential records must be shredded on-site or destroyed by a certified secure destruction vendor to ensure the information cannot be recovered or misused.
Question 5: What is an audit trail in the context of electronic records management?
- A scheduled review of filing cabinet organization
- A log that automatically records who accessed, created, modified, or deleted electronic records (Correct answer)
- A report showing how much digital storage space records are using
- A checklist used to verify that records are in the correct folder
Correct answer: A log that automatically records who accessed, created, modified, or deleted electronic records
An audit trail is an automatic electronic log that captures details of all actions taken on records, including who accessed them and when, supporting accountability and compliance.
Question 6: A caller asks a receptionist to confirm whether a specific person is employed at the company. According to confidentiality best practices, the receptionist should:
- Confirm or deny employment status freely since it is general information
- Transfer the call immediately to HR without saying anything
- Follow the company's established policy, which typically requires employee consent before confirming employment (Correct answer)
- Ask the caller to submit the request in writing via certified mail
Correct answer: Follow the company's established policy, which typically requires employee consent before confirming employment
Employment status is considered personal information; best practice requires the receptionist to follow company policy, which typically prohibits confirming or denying employment without the employee's prior consent.
Question 7: What does the term 'disposition' mean in records management?
- The process of organizing records by category
- The final action taken on a record at the end of its retention period, such as destruction or transfer to archives (Correct answer)
- The method used to retrieve records from storage
- A legal hold placed on records during litigation
Correct answer: The final action taken on a record at the end of its retention period, such as destruction or transfer to archives
Disposition refers to the final action applied to a record once it has met its retention requirements, which can include destruction, permanent archiving, or transfer to another repository.
CPR Records Management & Confidentiality 2
What is the purpose of a chain of custody log when handling sensitive documents?