Exam CISSP topic 1 question 457 discussion

To safeguard the personal information of European Union (EU) residents in a web application in compliance with the General Data Protection Regulation (GDPR), the developer should apply the principle of: C. Pseudonymization Pseudonymization is a specific security principle emphasized in GDPR. It involves the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information. It is a technique used to enhance data privacy and security by replacing or encrypting personally identifiable information (PII) with pseudonyms or codes. This helps protect the data while allowing for legitimate processing. Pseudonymization is the answer option explicitly specified in GDPR for enhancing data protection and privacy.

Given answer is correct: https://edps.europa.eu/press-publications/press-news/blog/pseudonymous-data-processing-personal-data-while-mitigating_en

agree with the given Answer C: Pseudonymization is the process of replacing personally identifiable information (PII) with a pseudonym, or a code or identifier, that is unique to each individual but does not reveal their true identity. Pseudonymization can be used to protect data while still allowing for some level of data analysis and processing.