Chapter 4: Controls

Question 1

Data-Oriented Strategies

Answer 1

Separate
Minimize
Hide
Abstract

Question 2

Process-Oriented Strategies

Answer 2

Enforce
Demonstrate
Inform
Control

Question 3

Separate

Answer 3

Separate the processing of personal data as much as possible to prevent correlation

Question 4

Distribute

Answer 4

Process personal data (for one task) in separate locations.

Logical segregation - placing access restrictions around data
Physical segregation - storing data on different servers

Question 5

Isolate

Answer 5

Process personal data for different purposes independently in separate databases.

E.g. Isolate data geographically, demographically, per customer, per individual.

Question 6

Minimize

Answer 6

Limit as much as possible the processing of personal data

Question 7

Exclude

Answer 7

Refrain from processing a data subject’s personal data.

Question 8

Select

Answer 8

Decide on a case-by-case basis to only process relevant personal data.

Question 9

Strip

Answer 9

Remove partially unnecessary attributes