Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles Flashcards

Which de-identification technique replaces direct identifiers with artificial keys while retaining a mapping table for re-identification?

Answer: Pseudonymization

Pseudonymization replaces identifiers with pseudonyms while keeping a mapping table, allowing re-identification by authorized parties.

A company collects only the data fields strictly required to fulfill a transaction. Which Privacy by Design principle does this practice reflect?

Answer: Data minimization

Data minimization means collecting only the personal data that is adequate, relevant, and limited to what is necessary.

Differential privacy protects individual privacy by adding what to query results?

Answer: Calibrated statistical noise

Differential privacy injects carefully calibrated noise into outputs so that no single individual's data can be inferred from results.

Which attack re-identifies anonymized data by combining it with publicly available auxiliary datasets?

Answer: Linkage attack

A linkage attack cross-references anonymized records with external data to re-identify individuals.

Under the GDPR, which role is responsible for processing personal data on behalf of the data controller?

Answer: Data processor

A data processor processes personal data only on the documented instructions of the data controller.

A privacy impact assessment (PIA) is most valuable when conducted at which stage of a project?

Answer: Early in the design phase

Conducting a PIA early in design allows privacy risks to be mitigated before costly system changes are required.

Which cryptographic approach allows computations on encrypted data without decrypting it first?

Answer: Homomorphic encryption

Homomorphic encryption enables arithmetic operations on ciphertext, yielding an encrypted result that decrypts to the correct answer.