CITI Program – Biomedical Research Practice Exam

The identification of a breach of confidentiality in research centers around the security and privacy of sensitive participant information. The correct response highlights that the loss of a laptop containing identifiable health data represents a significant failure to protect confidential information. When research data includes personally identifiable information, losing that data, especially in an unsecured manner, exposes participants to potential risks such as identity theft or unwanted disclosure of sensitive information. Thus, such an incident clearly constitutes a breach of confidentiality because it undermines the trust and privacy that must be maintained between researchers and participants.

In contrast, while a FERPA violation regarding educational records may involve privacy issues, it pertains specifically to the handling of educational information rather than the confidentiality of health data collected during research. An invasion of a subject’s privacy could suggest a breach, but it may not fully capture the specific context of confidentiality as it relates to data protection and its secure handling. Lastly, documentation errors in consent procedures mainly concern the processes of obtaining consent and do not directly indicate a breach of confidentiality unless they lead to unintended disclosures.