ISC2 Certified in Cybersecurity (CC)Security PrinciplesHard
A software development team is adopting a 'privacy by design' approach for a new application that handles personal user data. This means they are embedding privacy considerations into the entire development lifecycle from the outset, rather than adding them as an afterthought. Which key concept of data protection does 'privacy by design' most directly support?
- AData Minimization
- BTransparency
- CProactive vs. Reactive Privacy
- DAccountability
Show answer & explanationAnswer & explanation
Correct answer: C. Proactive vs. Reactive Privacy
Privacy by Design emphasizes a proactive approach to embedding privacy, contrasting with a reactive approach where privacy issues are addressed only after they arise. This is a core tenet of the concept.
Why the other options are wrong
- A. Data Minimization is a principle within privacy by design (collecting only necessary data), but not the overarching concept of 'privacy by design' itself.
- B. Transparency (being open about data practices) is a principle, but not the core 'how' of 'privacy by design'.
- D. Accountability is another principle (demonstrating compliance), but not the fundamental approach of integrating privacy from the start.
Privacy by Design
An approach to systems engineering that incorporates privacy considerations and data protection into the entire design and operation of information systems, network infrastructure, and business practices from the earliest stages.
- Emphasizes proactive rather than reactive privacy measures.
- Aims to prevent privacy issues before they occur.
- One of its seven foundational principles is 'Proactive, not Reactive; Preventative, not Remedial'.
Memory trick: Privacy is built-in, proactive, protective, full lifecycle, visible, user-centric, and secure.