"Handling confidential information can involve measures as simple as crossing through information or shredding, and it can be more complex with encryption and security access levels. An example I come across often is handling documentation with credit card and bank numbers. Given the nature of the documentation, we have to file it away for future auditing purposes, so we can't simply shred it. Instead, we keep the files in a secure area while processing takes place. Once processing is complete and we no longer require the number, I simply black-out the credit card information with a sharpie before filing it away for future audits. From there, individuals with proper clearances may access the general information without knowledge of their financial details. It is a simple measure to handle and protect confidential information, but it goes a long way."