Data confidentiality refers to which of the following?

• A. Encryption of all data
• B. Access rights for every user
• C. Protection against unauthorized disclosure
• D. Retention of documents for a specified period

Answer: (C)

Data confidentiality specifically concerns the protection of information from unauthorized access and disclosure. It ensures that sensitive data is only accessible to those who are permitted to view it, thereby safeguarding privacy and preventing breaches that could lead to misuse of that information. In essence, the main goal of data confidentiality is to maintain the secrecy of data, ensuring that individuals or organizations cannot view or exploit personal information without appropriate authorization.

While encryption, access rights, and data retention are all related concepts in the broader context of information security, they serve different purposes. Encryption secures data by transforming it into a coded format that can only be read by someone with the right decryption key. Access rights govern who can access specific data, but they don’t inherently convey the importance of keeping information secret from those who shouldn't see it. Data retention focuses on how long data should be held before being disposed of or archived, which is irrelevant to confidentiality itself.

Thus, the concept of data confidentiality is best captured by the protection against unauthorized disclosure, making it the most appropriate choice in this context.