CERTIFIED-IN-CYBERSECURITY · Question #735
Which principle requires organizations to implement appropriate technical and organizational measures to protect personal information?
The correct answer is D. Data security. The data security principle - codified in regulations such as GDPR Article 5(1)(f) - obligates organizations to protect personal data using appropriate technical measures (e.g., encryption, access controls) and organizational measures (e.g., policies, staff training). Data…
Question
Which principle requires organizations to implement appropriate technical and organizational measures to protect personal information?
Options
- AData accuracy
- BData minimization
- CData subject rights
- DData security
How the community answered
(37 responses)- A5% (2)
- B3% (1)
- C3% (1)
- D89% (33)
Explanation
The data security principle - codified in regulations such as GDPR Article 5(1)(f) - obligates organizations to protect personal data using appropriate technical measures (e.g., encryption, access controls) and organizational measures (e.g., policies, staff training). Data minimization (B) limits data collection; data accuracy (A) requires data to be correct; data subject rights (C) grants individuals control over their data - none of these specifically mandate protective security measures.
Topics
Community Discussion
No community discussion yet for this question.