Certified Information Privacy Technologist (CIPT) — Question 90

An organization has completed the acquisition of a smaller rival in a different but related industry. The acquisition was approved by the regulator on the condition that the personal data sets may not be combined. A way of achieving this objective is through?

Answer options

• A. Ciphertext
• B. Disassociability
• C. k-anonymity
• D. Pseudonymization

Correct answer: B

Explanation

Disassociability is the correct approach as it ensures that personal data sets remain separate and cannot be linked back to individuals. The other options, such as k-anonymity and pseudonymization, focus on techniques for data protection but do not specifically address the requirement of keeping data sets disjoint.