Data Collection, Use, Dissemination and Destruction

Minimizing privacy risk across the data life cycle: consent, notices and user controls at collection, minimization and privacy-enhancing techniques during use, safeguards on dissemination, and retention and destruction.

5 minutes 5 Questions

In the Certified Information Privacy Technologist (CIPT) framework, the data life cycle describes how personal information moves through an organization. Technologists must build privacy controls into every stage, an approach known as privacy by design. COLLECTION is the first stage. The core princ…

Concepts covered
Minimizing Privacy Risk from Data AggregationProfiling Risks and Technical MitigationsMedia Sanitization and DisposalAuthentication MechanismsConsent Requirements for Personal Data CollectionIdentity and Access ManagementPrivacy Settings and User ControlsData Subject Control over Use, Disclosure and RetentionBlackmail and AppropriationDifferential PrivacyBreach of Confidentiality and Personal Data BreachesData Destruction TechniquesExtracting Personal Data from Publicly Available SourcesClear and Accessible Privacy NoticesMinimizing Disclosure and Accessibility RisksConsent Management MechanismsData DistortionData Minimization TechniquesPrivacy Risks of Automatic Personal Data CollectionPrivacy DashboardsAnonymizationData Processing SegregationSecondary Uses of Personal DataData Retention TechniquesData ExposureAbstracting Personal Data for a Specific Use CaseMeasures to Manage Automatic Data CollectionPseudonymization
Test mode:
Start practice test

CIPT - Data Collection, Use, Dissemination and Destruction Example Questions

Test your knowledge of Data Collection, Use, Dissemination and Destruction

Question 1

A fitness app captures full-body photos to estimate body composition and shows them in an in-app progress gallery. Which two design choices MOST effectively reduce the risk of exposure?

Correct Answer: Discard images on-device once measurements are extracted Display progress as abstracted silhouettes rather than photographs

Exposure is the harm of revealing a person's body, nudity or other intimate physical or emotional attributes, causing embarrassment or loss of dignity. Discarding the photos on the device once measurements are extracted applies the minimize strategy. The intimate images are never stored or transmitted, so there is nothing left to expose, and the feature still works. Showing progress as abstracted silhouettes applies the abstract strategy. The gallery still shows progress, but the person's actual body is never displayed to anyone who sees the screen. Both choices prevent the risk in the design and keep the functionality. Encrypting stored images is a security safeguard that leaves the intimate images retained and viewable once decrypted. Per-scan opt-in consent relies on notice and choice and does not reduce what is collected or shown. Role-based staff access only restricts who can see the images; it does not remove them.

Question 2

A service shares customer profiles with partners. Outdated and incorrect attributes in those profiles have led partners to form misleading characterizations of individuals. Which two controls MOST directly reduce this data distortion risk?

Correct Answer: Propagating corrections to every recipient Input validation against authoritative sources

Data distortion is the harm of disseminating false or misleading information about an individual, so the controls that address it protect the accuracy and integrity of the data itself. Propagating corrections to every recipient makes sure that once a record is fixed, partners who received the earlier version stop relying on the inaccurate attributes. Input validation against authoritative sources prevents incorrect attributes from entering the profile in the first place, which stops distortion at its origin. The other three options address different risks. Detailed access logging only provides accountability by recording who queried the data. Encryption in transit protects confidentiality against interception but does nothing for accuracy. Pseudonymization weakens the link to the individual, yet the partner still receives and acts on the same inaccurate attributes.

Question 3

A product team is redesigning how its mobile app informs users about personal data collection. Which two techniques MOST improve the clarity and accessibility of the app's privacy notices?

Correct Answer: Layered notice with a short summary up front Just-in-time notice at the point of collection

A layered notice puts a concise, plain-language summary of the key practices first and links to fuller detail. Users can grasp what matters without reading a long document, and completeness is kept, so it is a positive-sum design. A just-in-time notice appears in context at the moment a specific piece of data is about to be collected, such as before a location or camera permission is requested. That ties the explanation to the user's current action and supports informed choice. The other three options do not achieve this. The single comprehensive policy linked in the footer is complete but buried and hard to digest, so it fails accessibility. The scroll-to-accept gate forces exposure to the text without improving comprehension, and it leans toward a dark pattern. Precise legal terminology may serve legal accuracy, but it reduces readability for ordinary users.

More Data Collection, Use, Dissemination and Destruction questions
760 questions (total)
Practice 100 questions
One session at a time, always new questions