Which elements constitute safeguarding tenant data?

• A. Access controls, encryption, secure storage, and minimization of data collection in line with privacy laws.
• B. Access controls and encryption only.
• C. Regular backups and offsite storage.
• D. Public cloud storage with open access.

Answer: (A)

Safeguarding tenant data means protecting the information from unauthorized access, disclosure, or loss, and doing so in a way that aligns with privacy rules. The strongest approach combines several essential controls: limiting who can access data (access controls) to ensure only authorized staff can view or modify information; encrypting data so that even if it’s accessed, it remains unreadable; storing data securely so both digital and physical storage are protected against threats; and practicing data minimization—collecting only what’s necessary and retaining it only as long as needed—to reduce exposure and stay in line with privacy laws. Together, these elements address both practical security and regulatory compliance, creating a robust defense around tenant information.

The other options miss important aspects: limiting to just access controls and encryption leaves gaps in how data is stored and how much data is collected; focusing only on backups and offsite storage emphasizes availability and disaster recovery rather than restricting access or minimizing data; and using public cloud storage with open access is inherently unsafe and contradicts the goal of protecting tenant data.