Certified Information Privacy Technologist (CIPT) — Question 168

What Privacy by Design (PbD) element should include a de-identification or deletion plan?

Answer options

• A. Categorization.
• B. Remediation.
• C. Retention.
• D. Security

Correct answer: C

Explanation

The correct answer is C, Retention, because this element specifically addresses how long data should be kept and when it should be deleted or de-identified. Options A, B, and D do not focus on the lifecycle management of data in the same way that Retention does.