CIPT Certified Information Privacy Technologist: Privacy Technology and Data Protection Principles 4

Question 1

Which privacy-enhancing technology allows a user to prove they meet a criterion (e.g., age over 18) without revealing the underlying data?

Accepted Answer

Zero-knowledge proofs

Answer

Zero-knowledge proofs let one party prove knowledge of a fact to another party without conveying any information beyond the validity of the claim.

Question 2

Which data governance document formally describes what personal data an organization collects, how it is used, and with whom it is shared?

Accepted Answer

Records of processing activities (RoPA)

Answer

A Records of Processing Activities (RoPA) documents all personal data processing operations and is required under GDPR Article 30.

Question 3

A healthcare app encrypts data in transit using TLS but stores it in plaintext on the server. Which threat does this configuration leave unaddressed?

Accepted Answer

Server-side data breach

Answer

Encrypting only data in transit leaves stored data vulnerable to server compromise; encryption at rest is also required.

Question 4

Which US federal law specifically governs the privacy of student educational records and restricts their disclosure without consent?

Accepted Answer

FERPA

Answer

FERPA (Family Educational Rights and Privacy Act) protects the privacy of student education records and gives parents rights over those records.

Question 5

Federated learning improves privacy by training machine learning models in what manner?

Accepted Answer

Training locally on devices and sharing only model updates

Answer

Federated learning keeps raw data on local devices and aggregates only model gradient updates, preventing raw data exposure.

CIPT - Certified Information Privacy Technologist Practice Test