Which of the following statements about confidentiality is NOT correct?
A) All records must be kept by the program director/manager under lock and key
B) Data must be available to all individuals who need to see it
C) Data should be kept on file for at least 1 yr before being discarded
D) Sensitive information
(e.g., participant's name) need to be protected