Multiple choice › Privacy by design
Privacy by design
1. Privacy by design
Which is an example of the 'proactive not reactive' principle of privacy by design?
- Waiting for a data breach, then adding encryption
- Deleting a complaint from the support system
- Asking users to accept long terms after the app is released
- Carrying out a privacy risk assessment before building the feature
Answer
D
Privacy by design anticipates and prevents privacy problems before they occur, rather than reacting afterwards.
2. Privacy by design
An app collects only the data it needs and deletes location history after 30 days. Which privacy-by-design idea does this BEST show?
- Maximising data collection for future uses
- Reacting to a breach after it occurs
- Embedding privacy into the design (data minimisation and retention limits)
- Making privacy an optional extra
Answer
C
Collecting the minimum and deleting data on a schedule is privacy built into the system by default.