CAS-003 · Question #340
A database administrator is required to adhere to and implement privacy principles when executing daily tasks. A manager directs the administrator to reduce the number of unique instances of PII…
The correct answer is D. Data minimization. Data minimization is a core privacy principle codified in frameworks such as GDPR, NIST Privacy Framework, and ISO 27701. It requires that organizations collect, process, and retain only the minimum amount of personal data necessary for a specified, legitimate purpose. By…
Question
A database administrator is required to adhere to and implement privacy principles when executing daily tasks. A manager directs the administrator to reduce the number of unique instances of PII stored within an organization's systems to the greatest extent possible. Which of the following principles is being demonstrated?
Options
- AAdministrator accountability
- BPII security
- CRecord transparency
- DData minimization
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- D91% (31)
Explanation
Data minimization is a core privacy principle codified in frameworks such as GDPR, NIST Privacy Framework, and ISO 27701. It requires that organizations collect, process, and retain only the minimum amount of personal data necessary for a specified, legitimate purpose. By directing the administrator to reduce unique PII instances across systems, the manager is directly applying data minimization. This is distinct from PII security (protecting data that exists), record transparency (informing individuals about data use), and administrator accountability (ensuring admins are answerable for their actions).
Topics
Community Discussion
No community discussion yet for this question.