CIPT Privacy by Design and Engineering 1 — Questions and Answers
Question 1: Which of Ann Cavoukian's seven foundational principles of Privacy by Design states that privacy should be the default setting?
- Privacy as the Default Setting (Correct answer)
- Proactive not Reactive
- Full Functionality
- End-to-End Security
Correct answer: Privacy as the Default Setting
Privacy as the Default Setting means users automatically receive maximum privacy without any required action on their part.
Question 2: In Privacy by Design, what does the principle 'Proactive not Reactive' mean?
- Anticipate and prevent privacy-invasive events before they occur (Correct answer)
- React quickly when a data breach happens
- Notify users after collecting their data
- Comply with regulations after they are enacted
Correct answer: Anticipate and prevent privacy-invasive events before they occur
Proactive not Reactive means privacy is built in from the start, preventing incidents rather than remedying them after the fact.
Question 3: Which Privacy by Design principle ensures that privacy coexists with other legitimate system goals without trade-offs?
- Full Functionality — Positive-Sum, not Zero-Sum (Correct answer)
- Visibility and Transparency
- End-to-End Security
- User-Centric Design
Correct answer: Full Functionality — Positive-Sum, not Zero-Sum
Full Functionality rejects the notion that privacy must be sacrificed for functionality, seeking a win-win outcome instead.
Question 4: A development team uses data minimization during system design so that only necessary personal data fields are collected. Which Privacy by Design principle does this best reflect?
- Privacy Embedded into Design (Correct answer)
- Proactive not Reactive
- Visibility and Transparency
- End-to-End Security
Correct answer: Privacy Embedded into Design
Privacy Embedded into Design requires integrating privacy controls — including data minimization — directly into the architecture of systems.
Question 5: What does 'End-to-End Security — Full Lifecycle Protection' require in Privacy by Design?
- Secure retention and deletion of data throughout its entire lifecycle (Correct answer)
- Encrypting only data in transit
- Securing only the database layer
- Applying security controls only during user authentication
Correct answer: Secure retention and deletion of data throughout its entire lifecycle
End-to-End Security means strong security measures protect data from collection through secure destruction at the end of its lifecycle.
Question 6: Which Privacy by Design principle emphasizes keeping systems open and verifiable so users can trust that stated privacy practices are actually being followed?
- Visibility and Transparency (Correct answer)
- Privacy as the Default Setting
- Proactive not Reactive
- User-Centric Design
Correct answer: Visibility and Transparency
Visibility and Transparency ensures that business practices and technologies are open to independent verification, building user trust.
CIPT Privacy by Design and Engineering 1
Which of Ann Cavoukian's seven foundational principles of Privacy by Design states that privacy should be the default setting?