What practice best maintains privacy compliance when collecting visitor information at events?

• A. Collect only necessary data, store securely, and disclose data usage; obtain consent for future contact
• B. Collect all information and share with sponsors
• C. Store data insecurely
• D. Never inform attendees how data will be used

Answer: (A)

Focusing on privacy controls at events means minimizing what you collect, securing what you do collect, and being transparent about how it will be used. This approach keeps attendee information safe, reduces the risk of data breaches, and meets expectations and legal requirements by giving people clear notice and choices about their data. Collecting only what’s necessary for the event, storing it securely, disclosing how it will be used, and obtaining consent for future contact ensures compliance with privacy laws and builds trust with attendees.

The other options run into problems: gathering everything and sharing it with sponsors expands data use beyond what attendees expect or consent to; storing data insecurely creates obvious security risks and violations of data protection standards; and never informing attendees how their data will be used fails to provide transparency and undermines consent.