Which of the following does NOT illustrate the ‘respect to user privacy’ principle?
A.
Implementing privacy elements within the user interface that facilitate the use of technology by any visually-challenged users.
B.
Enabling Data Subject Access Request (DSARs) that provide rights for correction, deletion, amendment and rectification of personal information.
C.
Developing a consent management self-service portal that enables the data subjects to review the details of consent provided to an organization.
D.
Filing breach notification paperwork with data protection authorities which detail the impact to data subjects.
The Answer Is:
D
This question includes an explanation.
Explanation:
Option A (Implementing privacy elements for visually-challenged users): This demonstrates respect to user privacy by ensuring that technology is accessible to all users, including those with disabilities. It aligns with the principle of inclusivity and respect for all users.
Option B (Enabling DSARs): This directly respects user privacy by allowing individuals to exercise their rights to access, correct, delete, amend, and rectify their personal information. It is a core aspect of privacy rights under regulations like GDPR.
Option C (Consent management portal): Providing a consent management self-service portal allows users to review and manage their consent preferences. This empowers users with control over their personal data, which is a key aspect of respecting user privacy.
Option D (Filing breach notification paperwork): Filing breach notification paperwork with data protection authorities is a compliance activity rather than an illustration of respect for user privacy. While it is necessary and legally required, it does not directly interact with or respect user privacy principles in the same way as the other options.
References:
GDPR Articles on Data Subject Rights (Articles 15-22).
Principles of Privacy by Design and Respect for User Privacy (Ann Cavoukian’s 7 Foundational Principles).
Conclusion: Filing breach notification paperwork with data protection authorities (Option D) is a necessary compliance activity but does not directly illustrate the ‘respect to user privacy’ principle in the same way as the other options.
CIPT PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 65% Discount on All Products,
Use Coupon: "ac4s65"