By Design Principles Flashcards
7 cards from real CDPSE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 By Design Principles flashcards as text
Which Privacy by Design principle requires that privacy protection remain effective even as systems evolve over time?
Answer: Full Lifecycle Protection
Full Lifecycle Protection ensures privacy safeguards are embedded from data collection through secure destruction, persisting across system changes.
A development team wants to embed privacy controls into their agile sprint process rather than reviewing them at launch. This aligns with which Privacy by Design principle?
Answer: Proactive not Reactive; Preventative not Remedial
Proactive not Reactive means anticipating and preventing privacy events before they occur rather than responding after the fact.
An organization allows users to opt out of data sharing but sets opt-in as the default. Does this satisfy the 'Privacy as the Default' principle?
Answer: No, because the most privacy-protective option must be the default
Privacy as the Default requires that the strongest privacy protections apply automatically without any user action.
Which Privacy by Design foundational principle directly rejects the idea that privacy and security are mutually exclusive?
Answer: Full Functionality — Positive-Sum, not Zero-Sum
Full Functionality rejects false either/or trade-offs, asserting that privacy and security (or privacy and functionality) can both be fully achieved.
A CDPSE candidate is reviewing a system that logs all user activity by default and requires users to disable logging themselves. Which principle is most clearly violated?
Answer: Privacy as the Default Setting
Privacy as the Default requires that data minimization and privacy protections are automatic, not requiring user action to activate.
When Privacy by Design says it should be 'embedded into design,' what does this primarily mean for software architects?
Answer: Privacy is integrated as a core component of the system architecture
Embedding privacy into design means it is a core architectural element, not an afterthought or add-on layer.
The 'Respect for User Privacy' principle in Privacy by Design centers on which key concept?
Answer: Keeping privacy user-centric and empowering individuals
Respect for User Privacy means the system is designed around the individual's interests, giving users strong defaults, notice, and meaningful control.