Exam CIPT topic 1 question 54 discussion

C. An internet forum for victims of domestic violence that allows anonymous posts without registration. Data Protection by Default means that privacy and data protection measures are integrated into the design and operation of a system or process from the outset. Allowing anonymous posts without requiring registration aligns with this principle by minimizing the amount of personal data collected and reducing the risk of identifying individuals, thus enhancing their privacy and security by default.

You’ve provided a detailed and thoughtful analysis. I agree with your conclusion that the principle of Data Protection by Default is most embodied by Option B: An electronic teddy bear with built-in voice recognition that only responds to its owner’s voice. This option minimizes data collection and processing to the bare minimum needed for its intended function, demonstrating a stronger alignment with Data Protection by Default compared to the other options. It aligns with the purpose of the product and ensures that only necessary data (the owner’s voice) is collected and processed. Your explanations of the other options are also accurate. Allowing anonymous posts (Option C), using HTTPS in a messaging app (Option A), and having an opt-in for marketing emails (Option D) are all important components of data protection, but they do not directly embody the principle of Data Protection by Default.

Answer is c. Data mitigation by allowing anonymous post

Imho is C

D is privacy by default, not data protection, and so is C. B is vague, but between B and A, A seems the stronger answer and clearly constitutes data protection by default, by opting to use the more secure HTTPS over HTTP