CDPSE By Design Principles 5

Question 1

A Privacy Impact Assessment (PIA) conducted before a system is built rather than after deployment best reflects which Privacy by Design principle?

Accepted Answer

Proactive not Reactive; Preventative not Remedial

Answer

Conducting a PIA before building the system exemplifies the proactive principle — identifying and mitigating privacy risks before they are built into the product.

Question 2

An organization's API returns full user objects including fields the calling service doesn't need. Which Privacy by Design concept should the architect apply?

Accepted Answer

Data Minimization at the API response level

Answer

Data minimization requires that only the data actually needed by the consuming service is returned, reducing unnecessary exposure in transit and at rest.

Question 3

Which Privacy by Design principle is MOST concerned with ensuring individuals can access, correct, and delete their own data?

Accepted Answer

Respect for User Privacy — Keep it User-Centric

Answer

Respect for User Privacy (Keep it User-Centric) centers the design on empowering individuals with rights over their own data including access, correction, and erasure.

Question 4

A CDPSE candidate finds that an application stores passwords in plaintext in the database. This violates which Privacy by Design principle most directly?

Accepted Answer

Full Lifecycle Protection — End-to-End Security

Answer

End-to-End Security as part of Full Lifecycle Protection requires that credentials are stored using strong hashing, not plaintext, throughout the data's lifecycle.

Question 5

An organization publishes its data processing algorithms and allows independent third-party audits of its privacy controls. This most directly demonstrates which principle?

Accepted Answer

Visibility and Transparency — Keep it Open

Answer

Visibility and Transparency requires that organizations open their practices to independent verification, going beyond self-attestation.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE By Design Principles 5