How is PII or sensitive data handled in DPAS 1020?

• A. Access must follow DoD data protection policies; minimize exposure, restrict access, and log access.
• B. PII can be shared openly among users.
• C. No restrictions beyond system login.
• D. Only administrators can access.

Answer: (A)

PII and sensitive data in DPAS 1020 must be protected under DoD data protection policies. The idea is to minimize exposure, grant access only to those who have a legitimate need-to-know, and keep an audit trail of who accesses the data. This combination—enforcing proper protections, restricting access by role, and logging access—provides accountability and reduces the risk of exposure or misuse. Openly sharing data, having no restrictions beyond a login, or limiting access to only administrators all fail to meet these protections and undermine security and legitimate operational needs.