CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 4

Question 1

A privacy technologist is conducting a Data Protection Impact Assessment. Which GDPR article makes DPIAs mandatory for high-risk processing?

Accepted Answer

Article 35

Answer

GDPR Article 35 requires a DPIA before processing that is likely to result in a high risk to individuals' rights and freedoms.

Question 2

Which framework component in the NIST Privacy Framework maps most closely to implementing access controls and encryption for personal data?

Accepted Answer

Protect-P

Answer

The Protect-P function in the NIST Privacy Framework covers activities that develop and implement safeguards to prevent privacy incidents.

Question 3

An organization in Australia processes personal information under the Australian Privacy Act. Which document sets out the 13 Australian Privacy Principles?

Accepted Answer

The Privacy Amendment (Enhancing Privacy Protection) Act 2012

Answer

The Privacy Amendment (Enhancing Privacy Protection) Act 2012 replaced the former Information Privacy Principles and National Privacy Principles with the 13 APPs.

Question 4

In a federated identity model, how does the approach support the privacy principle of data minimization?

Accepted Answer

By sharing only necessary attributes rather than full identity records

Answer

Federated identity allows a user's home organization to vouch for specific attributes, so relying parties receive only what they need rather than complete identity dossiers.

Question 5

Which term describes the privacy risk scenario where combining non-sensitive datasets produces a result that reveals sensitive personal information?

Accepted Answer

The aggregation problem

Answer

The aggregation problem refers to the privacy risk where combining multiple individually harmless data elements creates a sensitive composite picture of an individual.

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 4