5.5 Data Privacy

Question 1

Define data minimization

Answer 1

Privacy enhancement by only collecting the minimum necessary information for the required function

Question 2

Define data masking

Answer 2

Privacy enhancement by obfuscating actual data, i.e. displaying **7493 instead of a full credit card #

Question 3

Define data anonymization

Answer 3

1. Protecting data by replacing fields that should be private with an alternate value in the database
2. Irreversible - original replaced data cannot be retrieved

Question 4

Define pseudo-anonymization

Answer 4

Same as data anonymization, but reversible back to original data

Question 5

Define data owner

Answer 5

Individual with overall responsibility for data

Question 6

Define data controller

Answer 6

Person responsible for the purposes and means by which data is processed

Question 7

Define data processor

Answer 7

Work under guidance of data controllers to actually process data

Question 8

Define data protection officer (DPO)

Answer 8

Higher-level manager responsible for organization’s data privacy, processes and procedures