An organization's new sales application asks for consent to collect consumer personal information. Which foundational privacy by design principle is this organization following?

Question

Options

• ARespecting user privacy
• BMaintaining visibility and transparency
• CEmbedding privacy into system requirements
• DEnsuring end-to-end security

• A
  90% (28)
• B
  6% (2)
• C
  3% (1)

Explanation

Ann Cavoukian's seven Privacy by Design (PbD) principles include 'Respect for User Privacy-Keep it User-Centric.' This principle requires that systems be designed to protect the individual's interests, including giving users strong privacy defaults, appropriate notice, and empowering options such as the ability to consent or withdraw consent. Asking for explicit consent before collecting personal information places user control and user interests at the center of the design, which is the hallmark of the 'Respect for User Privacy' principle. Transparency (B) relates to openness about practices; embedding privacy into requirements (C) is a design-phase principle; end-to-end security (D) relates to data lifecycle protection.

No community discussion yet for this question.