Personal Information CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which privacy principle requires that personal information be adequate, relevant, and limited to what is necessary for the intended purpose?

   • AIntegrity and confidentiality
   • BAccuracy
   • CData minimization
   • DAccountability
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is an example of non-personal data?

   • AA customer's IP address
   • BA customer's date of birth
   • CA list of product prices
   • DA customer's email address
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following best defines personal information?

   • AAny data that relates to an identified or identifiable natural person
   • BInformation that is publicly available and therefore not subject to privacy regulations
   • CAny data that is stored in a database, regardless of its content
   • DData that is aggregated and anonymized so that individuals cannot be re-identified
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A telecommunications company stores call detail records (CDRs) that include the caller's phone number, the callee's phone number, call duration, and timestamp. The company wants to analyze CDRs to identify network congestion. Which data should be removed or anonymized to minimize privacy risk while still achieving the analysis goal?

   • ACaller and callee phone numbers
   • BNo data needs to be removed because CDRs are not personal information.
   • CCall duration and timestamp
   • DOnly the caller's phone number
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A healthcare provider wants to use patient data for a new research study. The data includes diagnoses, medications, and age ranges. The provider plans to remove all direct identifiers and publish the dataset. However, the provider is concerned that the data may still be re-identifiable. Which additional measure would most effectively reduce re-identification risk?

   • ARemove all data for patients over 80 years old.
   • BPublish the data only to researchers who sign a confidentiality agreement.
   • CAdd random noise to the diagnoses.
   • DGeneralize age ranges to broader categories, such as 10-year bands.
   Reveal Solution Discussion Select an answer first