Option D is the best answer because CHFI v11 explicitly includes Seeking Consent , Best Practices for Handling Digital Evidence , Legal Issues, Privacy Issues and Legal Compliance , and Managing Clients or Employers during Investigations .

When consent is not granted, the investigator cannot simply access sensitive client data on their own authority. At the same time, immediately withdrawing may not be the only appropriate response if there are lawful and ethical alternative ways to obtain relevant evidence without violating confidentiality. The CHFI-aligned approach is to respect the client’s concerns , remain within legal and ethical boundaries, and explore other permissible evidence-gathering options, such as narrower collection scopes, anonymized review procedures, or additional legal authorization where appropriate.

Options A and B clearly violate consent and confidentiality principles. Option C is too absolute and does not reflect the possibility of lawful alternative approaches. Therefore, the strongest answer under CHFI’s consent and legal-compliance principles is to respect the firm’s concerns and seek other means of gathering evidence without breaching client confidentiality .