Privacy by Design and Engineering Flashcards

Which software development practice integrates privacy requirements into each sprint or iteration of an Agile project?

Answer: Privacy by Design in Agile (privacy user stories)

Writing privacy user stories and including privacy acceptance criteria in each sprint embeds Privacy by Design into Agile workflows.

A CIPT is reviewing a new mobile app. She recommends that the app request location permission only when a location-based feature is actively used. Which principle does this reflect?

Answer: Context-aware data collection (purpose limitation)

Context-aware data collection ensures personal data is gathered only when directly needed for a specific user action, limiting purpose and minimizing collection.

What is the main goal of applying 'data separation' or 'compartmentalization' as a privacy engineering technique?

Answer: Limiting the combination of data that could re-identify individuals

Data separation prevents linking datasets that together could re-identify individuals, limiting the risk of aggregation attacks.

Which type of architecture ensures that no single server or administrator can access a user's complete personal data, distributing trust across multiple parties?

Answer: Distributed or decentralized privacy architecture

Distributed privacy architectures split data across multiple parties so no single point of failure or insider can access all personal data.

A privacy engineer proposes using 'k-anonymity' when publishing a dataset. What does this guarantee?

Answer: Each record is indistinguishable from at least k-1 other records on quasi-identifiers

k-anonymity ensures that any individual in a dataset cannot be uniquely identified because their quasi-identifier combination matches at least k-1 other individuals.

When building a consent management platform, which engineering requirement is most critical from a Privacy by Design perspective?

Answer: Granular, revocable consent with clear audit logs

A consent management platform must record granular per-purpose consent, allow withdrawal at any time, and maintain tamper-evident audit logs.