CIPT Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles 2

Question 1

Which de-identification technique replaces direct identifiers with artificial keys while retaining a mapping table for re-identification?

Accepted Answer

Pseudonymization

Answer

Pseudonymization replaces identifiers with pseudonyms while keeping a mapping table, allowing re-identification by authorized parties.

Question 2

A company collects only the data fields strictly required to fulfill a transaction. Which Privacy by Design principle does this practice reflect?

Accepted Answer

Data minimization

Answer

Data minimization means collecting only the personal data that is adequate, relevant, and limited to what is necessary.

Question 3

Differential privacy protects individual privacy by adding what to query results?

Accepted Answer

Calibrated statistical noise

Answer

Differential privacy injects carefully calibrated noise into outputs so that no single individual's data can be inferred from results.

Question 4

Which attack re-identifies anonymized data by combining it with publicly available auxiliary datasets?

Accepted Answer

Linkage attack

Answer

A linkage attack cross-references anonymized records with external data to re-identify individuals.

Question 5

Under the GDPR, which role is responsible for processing personal data on behalf of the data controller?

Accepted Answer

Data processor

Answer

A data processor processes personal data only on the documented instructions of the data controller.

CIPT - Certified Information Privacy Technologist Practice Test