Mixed Deck — All CIPT Topics Flashcards

Which privacy risk is specifically introduced when an organization relies on a social login provider (e.g., 'Login with Facebook') for authentication?

Answer: The social provider may receive data about the user's activity across the organization's applications

Social login shares authentication events and potentially behavioral data with the identity provider, creating a third-party data disclosure that users may not fully understand.

A healthcare organization conducts quarterly 'access reviews' where managers certify which employees need continued access to patient records. What privacy risk does this address?

Answer: Privilege creep — accumulation of unnecessary access rights over time

Access reviews identify and remediate privilege creep, ensuring that only individuals with a current, legitimate need retain access to sensitive personal data.

What does 'containment' mean in the context of privacy incident response?

Answer: Stopping the breach from spreading and preventing further unauthorized access or exposure

Containment involves isolating affected systems, revoking unauthorized access, and stopping additional data exposure before investigation begins.

Which authentication method provides the strongest privacy protection by ensuring that even if a password is stolen, unauthorized access is prevented?

Answer: Multi-factor authentication (MFA)

MFA requires a second factor (e.g., TOTP code, hardware token) in addition to the password, significantly reducing the risk of unauthorized access from credential theft.

During the data disposal phase, which method best ensures that magnetic hard drive data is unrecoverable?

Answer: Degaussing followed by physical destruction

Degaussing disrupts magnetic domains to erase data, and physical destruction ensures media cannot be reconstructed, together providing the highest assurance of unrecoverability.

Which concept describes tracking the origin, movement, and transformations of data across its entire lifecycle within an organization?

Answer: Data lineage

Data lineage documents where data comes from, how it moves through systems, and how it is transformed, enabling accountability and privacy compliance verification.

Which privacy model treats privacy as a resource that individuals can selectively grant or withdraw, analogous to property rights?

Answer: Privacy as control (property-rights model)

The privacy-as-control or property-rights model views personal data as belonging to individuals who may grant licenses for its use.

A company's privacy notice is written at a 16th-grade reading level. Which privacy principle does this most directly violate?

Answer: Transparency (right to clear, intelligible information)

Privacy notices must be concise, transparent, and written in plain language so that data subjects can genuinely understand how their data is used.

In Privacy by Design, what does the principle 'Proactive not Reactive' mean?

Answer: Anticipate and prevent privacy-invasive events before they occur

Proactive not Reactive means privacy is built in from the start, preventing incidents rather than remedying them after the fact.

The 'Accountability' principle in the OECD Privacy Guidelines assigns responsibility for compliance to which party?

Answer: The data controller

Under the OECD Accountability principle, the data controller is responsible for ensuring the other principles are complied with.

Which threat model considers the scenario where a cloud provider's employees could access customer data stored on their platform?

Answer: Insider threat model

The insider threat model accounts for risks from individuals with legitimate system access, such as employees of a cloud or SaaS provider.

What is the primary purpose of data minimization as a privacy engineering control?

Answer: Collect only the data necessary for the specified purpose

Data minimization limits the collection of personal data to what is strictly necessary for a defined purpose, reducing privacy risk.

What is 'identity proofing' and why is it important for privacy?

Answer: Verifying that a person is who they claim to be before creating an account, preventing fraudulent or duplicate identities

Identity proofing validates that the person requesting an account or access is legitimate, preventing account fraud, impersonation, and unauthorized access to personal data stores.

When must an organization consult with the supervisory authority (e.g., a DPA) after completing a DPIA?

Answer: When the DPIA indicates a high residual risk that the organization cannot sufficiently mitigate

Prior consultation with the supervisory authority is required when the DPIA shows that high risks remain after the organization's mitigation efforts.

A CIPT is creating a privacy incident response plan. Which event type specifically triggers privacy-related incident response (as opposed to a general IT incident)?

Answer: An event involving unauthorized access to, loss of, or unlawful disclosure of personal data

Privacy incidents involve personal data — their unauthorized access, loss, destruction, or disclosure — and trigger specific notification obligations under applicable privacy laws.

Which attack re-identifies anonymized data by combining it with publicly available auxiliary datasets?

Answer: Linkage attack

A linkage attack cross-references anonymized records with external data to re-identify individuals.

What is the purpose of a data processing agreement (DPA) between a controller and a processor?

Answer: To contractually bind the processor to process data only on documented instructions and implement adequate safeguards

A DPA ensures the processor acts only on the controller's instructions, maintains confidentiality, and implements appropriate technical and organizational security measures.

What is the privacy advantage of using 'single sign-on' (SSO) federated identity over separate credentials for each application?

Answer: Reduces the number of places where credentials and identity data are stored, lowering exposure

SSO centralizes authentication so that identity data is managed in one place, reducing credential sprawl, orphaned accounts, and the attack surface for identity-based breaches.

In the context of Privacy by Design, what is a 'privacy impact assessment' (PIA) primarily used for during system development?

Answer: Identifying and mitigating privacy risks before system deployment

A PIA evaluates how a proposed system or process will affect individual privacy and enables teams to address risks before launch.

What is the key focus of the "Visibility and Transparency" principle?

Answer: Demonstrating accountability and making policies accessible

The "Visibility and Transparency" principle requires that organizations be open about their privacy practices and policies. It means that individuals should be informed about how their data is being collected, used, and shared, and that these practices should be verifiable. This fosters trust and allows for independent verification of privacy commitments, ensuring accountability.