Exam CIPT topic 1 question 209 discussion

Actual exam question from IAPP's CIPT

Question #: 209
Topic #: 1

An organization has completed the acquisition of a smaller rival in a different but related industry. The acquisition was approved by the regulator on the condition that the personal data sets may not be combined. A way of achieving this objective is through?

A. Ciphertext
B. Disassociability
C. k-anonymity
D. Pseudonymization

Show Suggested Answer

Suggested Answer: B 🗳️

by DrMai at Oct. 1, 2023, 2:43 a.m.

Comments

Submit Cancel

e38c357

4 months, 4 weeks ago

Selected Answer: B

Assuming the question reveals the answer by using thr term “objective” referring to the Privacy Engineering objectives. B is the only possible answer.

upvoted 1 times

...

Ssourav

11 months, 2 weeks ago

Selected Answer: B

The correct answer is **B. Disassociability**. Disassociability refers to the ability to keep different data sets or pieces of information separate from each other. In the context of this acquisition, disassociability would ensure that the personal data sets from the two organizations remain distinct and are not combined, thereby complying with the regulatory condition.

upvoted 2 times

...

fvo

1 year, 6 months ago

B Disassociability is the minimization of connections between data and individuals to the extent compatible with system operational requirements. This minimization can take many forms, from maximally disassociated data in the form of high-level aggregated data, to deidentified records pertaining to distinct individuals. Disassociability can also take the form of architectural data separation, in which identifiable personal information is kept segregated from, but still linkable to, transactional data.

upvoted 3 times

Stants

1 year, 4 months ago

A way of achieving the objective of not combining personal data sets after an acquisition is through: B. Disassociability Here’s why: Disassociability allows data to be used without creating a link back to the individuals the data is derived from. This can be achieved by ensuring that the processing of data does not lead to the identification of individuals. Ciphertext (Option A) is the result of encryption applied to plaintext and doesn’t inherently prevent data sets from being combined. k-anonymity (Option C) and Pseudonymization (Option D) are techniques used to de-identify data, but they don’t necessarily prevent the combination of data sets.

upvoted 2 times

...

DrMai

1 year, 9 months ago

why is not B - dissociability?

upvoted 2 times

...