CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 2

Question 1

Which NIST Privacy Framework core function focuses on developing and implementing organizational activities to identify privacy risk?

Accepted Answer

Identify-P

Answer

The Identify-P function in the NIST Privacy Framework helps organizations develop an organizational understanding of privacy risk to individuals.

Question 2

In the context of the ISO 29101 privacy architecture framework, what does the 'PII principal' refer to?

Accepted Answer

The individual to whom the PII relates

Answer

In ISO 29101, the PII principal is the natural person to whom the personally identifiable information relates.

Question 3

A company implements a data minimization strategy where it only collects data fields absolutely necessary for a transaction. Which Fair Information Practice Principle does this best exemplify?

Accepted Answer

Collection limitation

Answer

Collection limitation is the FIPP that restricts data collection to what is necessary, relevant, and obtained fairly.

Question 4

Under the APEC Privacy Framework, which principle requires organizations to give individuals an opportunity to have inaccurate data corrected?

Accepted Answer

Access and Correction

Answer

The Access and Correction principle in the APEC Privacy Framework requires that individuals be able to access their data and correct inaccuracies.

Question 5

Which model explicitly uses 'contextual integrity' to evaluate whether information flows are appropriate?

Accepted Answer

Helen Nissenbaum's privacy-as-contextual-integrity model

Answer

Helen Nissenbaum's contextual integrity model holds that privacy is violated when information flows do not match the norms of the context in which data was shared.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 2