In a tech support role, you might handle sensitive customer information like account numbers or passwords. How do you ensure you protect customer privacy and comply with data security policies?

Situation

During a support call for a telecom account, a customer asked me to read back their full credit card number to confirm it. However, our policy only allows displaying the last four digits for security.

Task

I needed to verify the customer's identity without violating the data protection policy and while maintaining their trust.

Action

I politely explained: 'For security, I can only see the last four digits on my end, so I won't ask you for the full number. Instead, I'll send a secure verification code to your registered mobile number. Once you provide that, we can proceed.' I guided them through the OTP process and then addressed their billing concern without ever exposing sensitive data.

Result

The customer appreciated the security measure and said it gave them confidence in our company. The call was completed without any data breach, and I received positive feedback for balancing security with service.