Which of the following statements about confidentiality is not correct?
a. all records must be kept by the program director-manager under lock and key
b. data must be available to all individuals who need to see it
c. data should be kept on file for at least 1 yr before being discarded
d. sensitive information (e.g., participant's name) needs to be protected
Answer: c. data should be kept on file for at least 1 yr before being discarded