Certified Information Privacy Technologist (CIPT) — Question 186

An organization needs to be able to manipulate highly sensitive personal information without revealing the contents of the data to the users. The organization should investigate the use of?

Answer options

• A. Advanced Encryption Standard (AES)
• B. Homomorphic encryption
• C. Quantum encryption
• D. Pseudonymization

Correct answer: B

Explanation

The correct answer is Homomorphic encryption, as it allows computations to be performed on encrypted data without needing to decrypt it, thus keeping the data confidential. Advanced Encryption Standard (AES) and Quantum encryption do not provide the same capability for processing data while keeping it hidden, and Pseudonymization alters data to protect identity but does not enable manipulation of the original sensitive information.