A transcript containing medical records and financial account details must be delivered to counsel electronically. Which method best protects the information in transit?
Show answer & explanation
Answer: D
A standard FTP upload with a shared password: Incorrect. Basic FTP sends data, including passwords, unencrypted.
An attachment to a regular unencrypted email: Incorrect. Ordinary email can be intercepted or misdirected and is not encrypted end to end.
A public file-sharing link with no password set: Incorrect. Anyone who obtains the link can open the file.
An encrypted portal or SFTP transfer with login: Correct. Encrypted, authenticated transfer (SFTP, HTTPS portal or encrypted file) protects sensitive personal information in transit.
Deliver PII and sensitive information only through encrypted, access-controlled channels such as SFTP or secure portals.