Which of the following best describes the principle of least privilege in data access?
Think about limiting access to only what is needed.
The principle of least privilege means giving users only the access they need to perform their job, reducing risk of data misuse.
Which of the following is considered personal data under most privacy laws?
Personal data relates to information that identifies a person.
Personal data includes any information that can identify a person, such as email addresses.
You want to share customer data with a marketing team. Which action respects privacy rules?
Consider minimizing data exposure and protecting sensitive details.
Sharing only necessary data and anonymizing sensitive parts helps protect privacy while enabling work.
What can frequent access to sensitive data by an unauthorized user indicate?
Think about what unusual access patterns might mean for security.
Unauthorized frequent access often signals a security issue or data misuse that needs investigation.
Which approach best balances the need for data access with privacy protection in an organization?
Consider a system that controls access based on roles and keeps permissions updated.
Role-based access control limits data access to what is needed and reviewing permissions keeps security strong.