CIPT Privacy by Design and Engineering 2

Question 1

A privacy engineer is asked to implement a technique that replaces real user identifiers with pseudonyms in a dataset. What technique is being used?

Accepted Answer

Pseudonymization

Answer

Pseudonymization replaces direct identifiers with artificial identifiers (pseudonyms) so that data can no longer be attributed to a specific individual without additional information.

Question 2

Which engineering technique adds statistical noise to datasets to protect individual privacy while preserving overall data utility?

Accepted Answer

Differential privacy

Answer

Differential privacy injects calibrated noise into query results so that individual records cannot be inferred from aggregate outputs.

Question 3

A company wants to allow third-party analysis of its customer database without revealing individual records. Which technique best enables this?

Accepted Answer

Homomorphic encryption

Answer

Homomorphic encryption allows computations to be performed on encrypted data without decrypting it, preserving privacy during analysis.

Question 4

In the context of Privacy by Design, what is a 'privacy impact assessment' (PIA) primarily used for during system development?

Accepted Answer

Identifying and mitigating privacy risks before system deployment

Answer

A PIA evaluates how a proposed system or process will affect individual privacy and enables teams to address risks before launch.

Question 5

What is the primary purpose of data minimization as a privacy engineering control?

Accepted Answer

Collect only the data necessary for the specified purpose

Answer

Data minimization limits the collection of personal data to what is strictly necessary for a defined purpose, reducing privacy risk.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Privacy by Design and Engineering 2