Certified Information Systems Security Professional (CISSP) — Question 475

The acquisition of personal data being obtained by a lawful and fair means is an example of what principle?

Answer options

• A. Collection Limitation Principle
• B. Openness Principle
• C. Purpose Specification Principle
• D. Data Quality Principle

Correct answer: A

Explanation

The Collection Limitation Principle emphasizes that personal data should be obtained through lawful and fair methods. The other principles, such as Openness and Purpose Specification, focus on transparency and the intent behind data collection but do not directly address the legality and fairness of the acquisition process.