What is the proper approach to discussing a client's case with colleagues who are not on the engagement?

• A. Disclose non-public information with anyone who asks.
• B. Do not disclose non-public information; only discuss with authorized personnel and use de-identified or aggregated information if needed.
• C. Discuss with anyone in the organization as long as you believe confidentiality is preserved.
• D. Post details publicly to seek advice.

Answer: (B)

The key idea is safeguarding client confidentiality: share client information only with people who are authorized and who have a legitimate need to know for the work. When discussing a case with colleagues not on the engagement, you should not reveal non-public information. If a discussion is necessary, limit it to authorized personnel and, if possible, use de-identified or aggregated data so the client cannot be identified. This protects privacy, aligns with ethical obligations, and reduces the risk of information leakage. Disclosing to anyone who asks is inappropriate; discussing with anyone in the organization without proper authorization or necessity is also not appropriate, and posting details publicly is clearly not allowed.