QuestionQ111

Privacy by Design, Privacy by Default, and Privacy Engineering

An organization is launching a new online, subscription-based publication. Because the service is not aimed at children, users are asked for their date of birth during the sign-up process. The privacy technologist suggests it may be more appropriate to ask whether an individual is over 18, rather than require them to provide a date of birth. What type of threat is the privacy technologist concerned about?

  • A Identification
  • B Insecurity
  • C Interference
  • D Minimization
Explanation

Data minimization requires personal data to be adequate, relevant, and limited to what is necessary for the stated purpose. If the purpose is only to determine whether a person is at least 18, a full date of birth collects unnecessary additional detail compared with an age-threshold response.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!