Exam CIPP-C topic 1 question 11 discussion

Encrypting sensitive information ensures that, even if data is intercepted or accessed without authorization, it remains unreadable. This is a key practice under privacy laws such as PIPEDA (Personal Information Protection and Electronic Documents Act) and other data protection regulations. Encryption helps mitigate the risks of data breaches or unauthorized access to sensitive data. While minimizing the collection of identifying information is a good practice, it may not be practical or desirable in this case, as the company is collecting data for Diversity, Equity, and Inclusion (DEI) purposes. Additionally, it doesn’t address how to handle the sensitive information that is being collected. Encryption is still necessary.