CDPSE By Design Principles 2

Question 1

Which Privacy by Design principle requires that privacy protection remain effective even as systems evolve over time?

Accepted Answer

Full Lifecycle Protection

Answer

Full Lifecycle Protection ensures privacy safeguards are embedded from data collection through secure destruction, persisting across system changes.

Question 2

A development team wants to embed privacy controls into their agile sprint process rather than reviewing them at launch. This aligns with which Privacy by Design principle?

Accepted Answer

Proactive not Reactive; Preventative not Remedial

Answer

Proactive not Reactive means anticipating and preventing privacy events before they occur rather than responding after the fact.

Question 3

An organization allows users to opt out of data sharing but sets opt-in as the default. Does this satisfy the 'Privacy as the Default' principle?

Accepted Answer

No, because the most privacy-protective option must be the default

Answer

Privacy as the Default requires that the strongest privacy protections apply automatically without any user action.

Question 4

Which Privacy by Design foundational principle directly rejects the idea that privacy and security are mutually exclusive?

Accepted Answer

Full Functionality — Positive-Sum, not Zero-Sum

Answer

Full Functionality rejects false either/or trade-offs, asserting that privacy and security (or privacy and functionality) can both be fully achieved.

Question 5

A CDPSE candidate is reviewing a system that logs all user activity by default and requires users to disable logging themselves. Which principle is most clearly violated?

Accepted Answer

Privacy as the Default Setting

Answer

Privacy as the Default requires that data minimization and privacy protections are automatic, not requiring user action to activate.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE By Design Principles 2