Software Engineering › Learn step by step › Y12 Secure Software Architecture
Item 194 of 426 · Year 12: Secure Software Architecture, 17 of 57
Privacy by design
Term Key terms bank
Jump to a topic
- Exam format, question types and command words (46)
- Year 11: Programming Fundamentals (69)
- Year 11: The Object-Oriented Paradigm (33)
- Year 11: Programming Mechatronics (29)
- Year 12: Secure Software Architecture (57)
- Year 12: Programming for the Web (59)
- Year 12: Software Automation (35)
- Year 12: The Software Engineering Project (47)
- Diagrams and modelling tools (18)
- Python, SQL, pseudocode and CSS patterns (33)
Definition
An approach that builds privacy into software from the start: proactive not reactive, embed privacy into the design, and respect user privacy.
Example: 2025 Q16c marker note: link it to the scenario, e.g. only collect live location while the app is in use, rather than listing general privacy techniques.
Found in: syllabus, 2025 HSC marking guidelines, sample exam and familiarisation guidelines, school notes.
Proactive not reactive; embed privacy into design; respect for user privacy.
Where you'll use it in the test
Syllabus area: Y12 Secure Software Architecture.
Question types it can appear in
- Short answer: Describe how the app could implement privacy by design (2025 Q16c)
- Multiple choice: Pick the option that matches the definition or example.
- Fill in the blanks: Choose this term to complete a statement or table.
Where it has appeared in the paper
Secure Software Architecture (Part A). Part letters follow each paper’s own layout.
Related past questions
- 2025 HSC Q16c (3 marks): Privacy by design Secure Software Architecture (Part A) · 3 marks
How to use it
A model sentence
“An approach that builds privacy into software from the start: proactive not reactive, embed privacy into the design, and respect user privacy.” Then apply it: 2025 Q16c marker note: link it to the scenario, e.g. only collect live location while the app is in use, rather than listing general privacy techniques.
In a short answer, give the definition in your own words first, then tie it to the situation in the question. Do not copy the example above unless it fits the scenario.
Command words used with it
- Describe: Provide characteristics and features. (2025 HSC Q16c (3 marks): Privacy by design)
Official worked answer
2025 HSC Q16c (3 marks): Privacy by design (3 marks): official criteria and sample answer
Criteria
3: Describes ONE way privacy by design could be implemented in the weather app. 2: Outlines ONE feature of privacy by design. 1: Identifies a feature of privacy by design.
Sample answer
Embedded within the design of the weather app would be a process for regularly deleting identifiable data. For example, the app would likely record a person's live location to deliver relevant weather details. The privacy by design approach would incorporate a regular process to delete these locations from cache.
Go deeper
- Flashcard: Privacy by design in Secure Software Architecture (Year 12) · study that set
- Memorise: Cryptography and sandboxing in 'security by design'
- Key terms bank entry: Privacy by design
- Master answer: hsc2025-q16c (3 marks, short answer (describe)) (Master model answers: Secure Software Architecture)
- Notes: Privacy by design (syllabus: three parts) (Secure Software Architecture (Year 12))
- Notes: Use and explain the 'privacy by design' approach in the development of software… (Secure Software Architecture (Year 12))
- Full term page: every question, note and marking comment for Privacy by design
Check yourself
Explain “Privacy by design” in one sentence, give an example, and name a question type that could test it.
Reveal the answer
An approach that builds privacy into software from the start: proactive not reactive, embed privacy into the design, and respect user privacy.
Example: 2025 Q16c marker note: link it to the scenario, e.g. only collect live location while the app is in use, rather than listing general privacy techniques.
Could be tested as: Short answer, Multiple choice, Fill in the blanks.
Quick multiple choice
Which is an example of the 'proactive not reactive' principle of privacy by design?
- Waiting for a data breach, then adding encryption
- Deleting a complaint from the support system
- Asking users to accept long terms after the app is released
- Carrying out a privacy risk assessment before building the feature
Show the answer
D
Privacy by design anticipates and prevents privacy problems before they occur, rather than reacting afterwards.
Source: original (written for this study pack; not a NESA question). Open it in the multiple-choice bank.