Information Privacy Concepts

Question 1

Information privacy generally pertains to what is known as

Answer 1

personal identifiable information (PII)

Question 2

… is information that can be used to distinguish or trace an individual’s identity

Answer 2

PII

Question 3

Examples of Personal Identifiable Information (PII)

Answer 3

• Information about birth, race, religion, weight, activities, geographic indicators, employment information, education information, and financial information
• Personal characteristics, including photographic images, x-rays, fingerprints, or biometric image
• Asset information such as Internet Protocol (IP) or Media Access Control (MAC)

Question 4

In dealing with the privacy of PII, two (2) new concepts have emerged: what are those?

Answer 4

• Privacy by Design (PbD)
• Privacy Engineering

Question 5

The goal of privacy by design is to take privacy requirements into account throughout the system development process, from the conception of a new IT system through detailed system design, implementation, and operation

Answer 5

True

Question 6

These are system requirements that have privacy relevance

Answer 6

Privacy requirements

Question 7

define the protection capabilities provided by the system, the performance, and behavioral characteristics exhibited by the system, and the evidence used to determine that the system privacy requirements have been satisfied.

Answer 7

System privacy requirements

Question 8

Privacy requirements are derived from various sources, including laws, regulations, standards, and stakeholder expectation

Answer 8

True

Question 9

A useful guide to developing a PbD approach is the set of of foundational principles for PbD first proposed by ..

Answer 9

Ann Cavoukian

Question 10

What are the principles by Ann Cavoukian on Privacy by Design?

Answer 10

• Proactive, not reactive; preventive, not remedial
• Privacy as the default
• Privacy embedded into the design
• Full functionality: positive-sum, not zero-sum
  -End-to-end security-life cycle protection
• Visibility and transparency
• Respect for user privacy