Which of the following statements BEST differentiates sensitive personal data from other types of confidential data?

Question

Options

• AThe legal department is accountable for protecting sensitive personal data.
• BMasking techniques are only applicable to the protection of sensitive personal data.
• CSensitive personal data merits a higher level of protection.
• DSensitive personal data requires deletion beyond the retention period by law.

• A
  4% (1)
• B
  4% (1)
• C
  85% (22)
• D
  8% (2)

Explanation

Sensitive personal data-such as health information, racial or ethnic origin, religious beliefs, biometric data, or sexual orientation-is a legally recognized subcategory of personal data that carries heightened privacy risks to individuals. Privacy frameworks like GDPR explicitly require stronger protections for this category (e.g., explicit consent, restricted processing, mandatory DPIAs). Options A, B, and D contain inaccuracies: data protection accountability is not limited to the legal department, masking is applicable to many data types, and deletion obligations apply broadly to all personal data, not exclusively to sensitive data.

No community discussion yet for this question.