ISC2 Certified in Cybersecurity (CC)Security PrinciplesMedium
A global technology company is developing a new social media platform. They are particularly focused on ensuring that any personal data collected is minimized, securely stored, and deleted when no longer needed, right from the initial design phase. This approach aligns with which privacy concept?
- APrivacy by Design
- BData Minimization
- CRight to be Forgotten
- DOpt-in Consent
Show answer & explanationAnswer & explanation
Correct answer: A. Privacy by Design
Privacy by Design (PbD) integrates privacy considerations into the entire engineering process, from the initial design to the deployment and ongoing operation of systems, rather than treating privacy as an afterthought.
Why the other options are wrong
- B. Data Minimization is a principle within Privacy by Design, but not the overarching concept described.
- C. Right to be Forgotten is a user right concerning data deletion, but not the design approach described.
- D. Opt-in Consent is a method for obtaining user permission, not a design philosophy for the entire system.
Privacy by Design (PbD)
An approach to system engineering that embeds privacy into the design and operation of IT systems, networked infrastructure, and business practices from the outset.
- Proactive, not reactive.
- Privacy is embedded into design.
- Full lifecycle protection.
Memory trick: Design privacy in, don't bolt it on.