Which of the following observations should be of MOST concern to an IT privacy practitioner during an evaluation of an organization's privacy practices?

The correct answer is D. Tokens for personally identifiable data are stored as database fields. Storing tokens of PII directly in database fields undermines the security of tokenization and risks re-identification, making it the most concerning issue. Shared drives (A) and lack of labels (B) are governance gaps, and limited third-party access (C) can be controlled…

Privacy Architecture

Question

Options

AEmployee records are maintained on a shared drive
BEmail is sent out without a data classification label
CThird-party service desk staff can view limited customer data
DTokens for personally identifiable data are stored as database fields

How the community answered

(28 responses)

A
4% (1)
B
11% (3)
C
18% (5)
D
68% (19)

Explanation

Storing tokens of PII directly in database fields undermines the security of tokenization and risks re-identification, making it the most concerning issue. Shared drives (A) and lack of labels (B) are governance gaps, and limited third-party access (C) can be controlled contractually, but token misuse (D) poses direct privacy risk. "Improper token storage can compromise de-identification, reintroducing privacy risk."

Topics

#Tokenization#Data Protection#Privacy-Enhancing Technologies#Risk Assessment

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice