Which information is considered restricted and would be an example of restricted data?

• A. Restricted information: example Personnel files.
• B. Public information: Personnel files.
• C. Public information: HR records.
• D. Confidential information: Public memos.

Answer: (A)

Restricted data are the most sensitive type of information and require the tightest access controls. Personnel files fit this category because they contain private details about employees—identifiers, contact information, payroll, performance evaluations, disciplinary actions, benefits, and sometimes medical information. Sharing or exposing these records could lead to privacy violations, identity theft, or unfair treatment, so access must be limited to authorized personnel who have a legitimate need to know.

Public information should be accessible to everyone, so labeling personnel files as public would expose highly sensitive data. Public memos are intended for broad distribution, so calling them confidential would be inappropriate. Confidential information is sensitive and restricted to certain people, but these items are typically managed with the highest level of restriction, which is why personnel files are the best example of restricted data.