Privacy-Enhancing Technologies CDPSE Practice Questions (Page 7)

Questions 31–31

1. 31application · medium

   A marketing analytics company wants to publish a dataset of customer purchase records for academic research. The dataset must be considered anonymized under GDPR so that it falls outside the scope of data protection law. The company has removed names, email addresses, and phone numbers. What additional step is most critical to ensure the dataset is truly anonymized?

   • AEncrypt the dataset and share the decryption key with the research institution.
   • BReplace customer IDs with a random pseudonym and keep the mapping table secure.
   • CRemove the data from the company's production systems and store it on a separate server.
   • DSuppress or generalize quasi-identifiers such as ZIP codes, birth dates, and rare occupations.
   Reveal Solution Discussion Select an answer first