CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ155

VerifiedSecurity and Risk Management

A developer is building a web application that will store and process the personal information of European Union (EU) residents. Which of the following security principles, explicitly specified in the General Data Protection Regulation (GDPR), should the developer use to protect personal information in the application?

Explanation

GDPR Article 25 requires appropriate technical and organisational measures for data protection by design and by default, explicitly including pseudonymisation. Pseudonymisation reduces the direct link between stored data and an identifiable person while retaining the ability to process the data under controlled safeguards.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!