Which statement best captures the distinction between privacy and confidentiality in the context of digital data?

• A. Privacy concerns only physical records.
• B. The obligation to protect information.
• C. The patient's broader control over personal data and its use.
• D. Privacy and confidentiality are identical.

Answer: (C)

In the digital data context, privacy is about the person’s broad control over their personal information—what is collected, why it’s collected, how it’s used, who can access it, and for how long it’s kept, including choices about consent and withdrawal of that consent. Confidentiality is the responsibility of those who hold the data to protect it from unauthorized disclosure or access, using safeguards like security measures, access controls, and clear data-sharing policies.

The best statement reflects privacy as the patient’s wider control over their data and its use. It recognizes that individuals should have a say in how their information is gathered and used, not just that data is protected. The other options mix up the concepts: privacy isn’t limited to physical records, confidentiality is about protection duties, and privacy and confidentiality are not identical but related.