During access control screening, which practice supports accountability and legal compliance?

• A. Skipping documentation to save time.
• B. Only documenting if something is found.
• C. Filing a separate incident report later.
• D. Documenting the search and outcomes, while ensuring privacy.

Answer: (D)

Documenting the screening process and its outcomes while protecting privacy creates a reliable record that supports accountability and legal compliance. When you record what was searched, what was found (or not found), the actions taken, who conducted the screening, and the times involved, you establish an auditable trail. This trail shows that procedures were followed and decisions were justified, which is essential if the process is ever reviewed or questioned. At the same time, protecting privacy means limiting access to personal information, redacting sensitive data when appropriate, and storing records securely. Keeping thorough, privacy-conscious records demonstrates adherence to procedures and data-handling rules, helping to defend against liability and ensuring rights are respected. Conversely, skipping documentation, only recording when something is found, or delaying a report creates gaps or confusion, making accountability difficult and increasing legal risk.