CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 5

Question 1

Which privacy model treats privacy as a resource that individuals can selectively grant or withdraw, analogous to property rights?

Accepted Answer

Privacy as control (property-rights model)

Answer

The privacy-as-control or property-rights model views personal data as belonging to individuals who may grant licenses for its use.

Question 2

In the CIPT body of knowledge, which privacy-enhancing technology (PET) allows a verifier to confirm a fact about a user without learning the underlying data?

Accepted Answer

Zero-knowledge proof

Answer

A zero-knowledge proof enables one party to prove knowledge of a value to another party without conveying any information beyond the validity of the statement.

Question 3

An organization's privacy notice discloses that it shares data with 'partners for marketing purposes.' Under GDPR transparency requirements, what is missing?

Accepted Answer

The specific identities or categories of third-party recipients

Answer

GDPR Article 13/14 requires disclosing the recipients or categories of recipients of personal data, not just a vague description like 'partners.'

Question 4

The concept of 'privacy by default' in GDPR Article 25 primarily requires that:

Accepted Answer

The most privacy-protective settings are active without user action

Answer

Privacy by default means that, by default, only personal data necessary for each specific purpose is processed, without requiring action from the data subject.

Question 5

Which international standard provides guidance on privacy information management systems (PIMS) and is complementary to ISO/IEC 27001?

Accepted Answer

ISO/IEC 27701

Answer

ISO/IEC 27701 extends ISO 27001 by specifying requirements and guidance for establishing and continually improving a Privacy Information Management System (PIMS).

CIPT - Certified Information Privacy Technologist Practice Test

CIPT - Certified Information Privacy Technologist Practice Test

CIPT Certified Information Privacy Technologist: Data Privacy Frameworks and Models 5