Exam CIPT topic 1 question 132 discussion

B. Manageability. This objective focuses on the ability to handle and control personal data, ensuring that it can be disclosed selectively, referenced securely, and managed (altered or deleted) as required.

Manageability refers to the ability to granularly administer personal information, including modification, disclosure and deletion. Disassociability is the minimization of connections between data and individuals to the extent compatible with system operational requirements. .is minimization can take many forms, from maximally disassociated data in the form of high-level aggregated data, for example, to de-identified records pertaining to distinct individuals. Disassociability can also take the form of architectural data separation, in which identifiable.

C is correct

C is correct

*it should be B - Manageability

NIST’s Privacy Engineering Program has proposed three privacy engineering objectives: predictability, manageability and disassociability. Disassociability is the minimization of connections between data and individuals to the extent compatible with system operational requirements. This minimization can take many forms, from maximally disassociated data in the form of high-level aggregated data, to de-identified records pertaining to distinct individuals. Disassociability can also take the form of architectural data separation, in which identifiable personal information is kept segregated from, but still linkable to, transactional data