Certified Data Privacy Solutions Engineer (CDPSE) — Question 33

Which of the following should be done FIRST to establish privacy by design when developing a contact-tracing application?

Answer options

• A. Conduct a privacy impact assessment (PIA).
• B. Conduct a development environment review.
• C. Identify privacy controls for the application.
• D. Identify differential privacy techniques.

Correct answer: A

Explanation

The first action to take for establishing privacy by design is to conduct a privacy impact assessment (PIA), as it helps identify potential privacy risks early in the development process. The other options, while important, come after the initial assessment and do not address the immediate need to evaluate privacy implications.