Users of a web-based email service have their accounts breached through compromised login credentials. Which possible consequences of the breach illustrate the two categories of Calo's Harm Dimensions?
Answer(s): C
Technical justificationCorrect choice – C (Identity theft and embarrassment)Identity theft falls under Calo’s informational-privacy harm dimension, where personal data is misused to assume another’s identity. Embarrassment represents the reputational-harm dimension, reflecting non-monetary damage to the user’s social standing that arises from the exposure of private details. The breach described directly produces both of these distinct harms: compromised credentials enable identity usurpation, and the leaked personal information can cause public humiliation or stigma.Why the other options are less appropriateA (Financial loss and blackmail) & B (Financial loss and solicitation) – Financial loss is a property-based harm, but Calo’s two primary privacy-focused dimensions are informational and reputational, not monetary loss. Blackmail and solicitation are specific malicious outcomes, not the core harm categories. D (Identity theft and the leaking of information) – Both components describe informational harms; they do not capture the second distinct category (reputational/embarrassment). The question asks for a pair that illustrates the two categories , not two instances of the same category.
Calo, R. (2011). The Harm in Privacy. Harvard Law Review, 124(5), 1259-1315. https://harvardlawreview.org/2011/02/the-harm-in-privacy/ NIST. (2023). Privacy and Security Controls for Federal Information Systems (SP 800-53 Rev. 5). Section F – Harm Categories. https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/finalPrepared as a concise, exam-style rationale for the CIPT certification.
Implementation of privacy controls for compliance with the requirements of the Children's Online Privacy Protection Act (COPPA) is necessary for all the following situations EXCEPT?
Technical justificationOption A – The virtual jigsaw puzzle is a web- or app-based game directed at children 5-9. Completing a level triggers a “new themes released” notification. This interaction typically captures device identifiers, session timestamps, and may transmit them to a server for analytics or advertising. Under COPPA, any collection of personally identifiable information (PII) from children under 13 triggers the requirement to implement a privacy-by-design controls (e.g., parental notice, data-minimization, secure storage). Hence privacy controls are mandatory.Option B – The interactive toy records a child’s gestures and voice, associates them with behavioral profiles, and synchronizes data with a home base station. This process creates a persistent identifier linked to the child and stores usage logs on a network-connected device. Because the toy collects and transmits personal information, it must comply with COPPA’s consent, data-retention, and security provisions.Option C – The math-tutoring advertisement appears on a physical bulletin board inside a charter school and uses a QR-code shaped like a cartoon character. The medium is purely offline; there is no online platform that collects, stores, or transmits the child’s personal data. COPPA applies only to entities that collect personal information online from children, so this scenario does not necessitate privacy controls under the Act.Option D – The note-taking application converts scanned class notes into audio books using idle server-farm resources. Processing requires uploading images of the child’s notes, which are personally related to the student’s identity and academic performance. Such data collection falls within COPPA’s scope, obligating the operator to implement appropriate privacy safeguards (notice, consent, data minimization, encryption, etc.).Therefore, Option C is the only situation that does not require implementation of privacy controls for COPPA compliance.
1. Federal Trade Commission, COPPA - Frequently Asked Questions (2023) – https://www.ftc.gov/coppa/faq 2. U.S. Department of Education, Child Online Privacy Protection Act (COPPA) Guidance for Schools (2022) – https://www2.ed.gov/about/offices/list/ocr/privacy/coppa.html
Which of the following does NOT illustrate the `˜respect to user privacy' principle?
Answer(s): D
JustificationOption A – Adding accessibility features (e.g., screen-reader support) does not directly concern the handling of personal data; it is about usability for visually-impaired users, not about user privacy. Option B – Allowing Data Subject Access, correction, deletion, amendment and rectification supports the user’s right to control their personal information, directly aligning with the user-privacy principle. Option C – A consent-management portal gives individuals visibility into and control over the processing of their data, reinforcing transparency and consent-centric privacy rights. Option D – Filing breach-notification paperwork with regulators addresses incident response and legal compliance, but it is a post-incident procedural step that does not affect the design or implementation of user-privacy controls within the product or service. Hence it does not illustrate the respect for user privacy principle itself.Therefore, Option D is the correct answer because it describes an administrative action rather than a privacy-by-design or privacy-by-default feature that directly protects users’ personal data.
ISO/IEC 27701: Privacy Information Management System – requirements and guidance for establishing, implementing, maintaining, and continually improving a privacy management system. https://www.iso.org/standard/75616.html IAPP CIPT Body of Knowledge – Chapter on “Privacy Principles and the Data Subject Lifecycle,” which explains how user-privacy principles focus on proactivity, consent, and control rather than breach reporting. https://iapp.org/resources/cipt-body-of-knowledge
Value Sensitive Design (VSD) focuses on which of the following?
Answer(s): B
JustificationEthics and morality is the core concern of Value-Sensitive Design – it seeks to embed moral values into technological artifacts rather than merely enhancing utility or compliance. While Quality and benefit (A) and Principles and standards (C) are important ingredients, they describe outcomes or frameworks rather than the overarching ethical intent that drives value-centric design. Privacy and human rights (D) represent specific rights that many VSD projects address, but they are a subset of the broader ethical domain rather than the defining focus of VSD itself.Therefore, the statement that VSD focuses on ethics and morality is the most accurate and captures its foundational purpose.
1. Friedman, B., Kahn, P. H., & Borning, A. (2006). Human values, ethics, and design. In The Cambridge Handbook of Information Systems (pp. 3-28). Cambridge University Press. https://doi.org/10.1017/CBO9780511546994.002 2. Information Privacy Engineering and Architecture (IPEA). Value-Sensitive Design (n.d.). https://www.ipea.com/research/value-sensitive-design/
SCENARIOLooking back at your first two years as the Director of Personal Information Protection and Compliance for the St. Anne's Regional Medical Center in Thorn Bay, Ontario, Canada, you see a parade of accomplishments, from developing state-of-the-art simulation based training for employees on privacy protection to establishing an interactive medical records system that is accessible by patients as well as by the medical personnel. Now, however, a question you have put off looms large: how do we manage all the data-not only records produced recently, but those still on-hand from years ago? A data flow diagram generated last year shows multiple servers, databases, and work stations, many of which hold files that have not yet been incorporated into the new records system. While most of this data is encrypted, its persistence may pose security and compliance concerns. The situation is further complicated by several long-term studies being conducted by the medical staff using patient information. Having recently reviewed the major Canadian privacy regulations, you want to make certain that the medical center is observing them.You recall a recent visit to the Records Storage Section in the basement of the old hospital next to the modern facility, where you noticed paper records sitting in crates labeled by years, medical condition or alphabetically by patient name, while others were in undifferentiated bundles on shelves and on the floor. On the back shelves of the section sat data tapes and old hard drives that were often unlabeled but appeared to be years old. On your way out of the records storage section, you noticed a man leaving whom you did not recognize. He carried a batch of folders under his arm, apparently records he had removed from storage.You quickly realize that you need a plan of action on the maintenance, secure storage and disposal of data.Which cryptographic standard would be most appropriate for protecting patient credit card information in the records system at St. Anne's Regional Medical Center?
Answer(s): A
Why Symmetric Encryption is the most appropriate choiceDirect protection of sensitive data at rest – Credit-card numbers (PANs) must be rendered unreadable when stored on servers, databases or backup media. Strong symmetric algorithms (e.g., AES-256) provide confidentiality by encrypting the entire data block with a single secret key that can be managed and audited consistently across the environment. This meets the core requirement of PCI-DSS v4.0 §3.5, which mandates that “cardholder data be encrypted wherever it is stored.”Maturity and performance – Mature symmetric primitives are widely supported by operating systems, databases and hardware security modules (HSMs). They deliver high throughput with low latency, which is essential for a medical-record system handling large volumes of transaction-related data.Key-management control – Encryption keys can be stored in a centralized KMS or HSM, enabling role-based access, rotation policies and audit trails—all essential for demonstrating compliance during external audits.Regulatory alignment – Both the Canadian PIPEDA and the U.S. PCI-DSS standards explicitly reference the use of strong encryption for “sensitive authentication data” such as PANs. Using symmetric encryption satisfies these statutory expectations without introducing additional complexity.Why the other options are less suitableTokenization (B) – Tokenization replaces a PAN with a surrogate token that has no intrinsic value. While useful for payment-processing environments, it is not a cryptographic standard per se; it relies on a separate token-generation service and does not encrypt the original data. The question specifically asks for a cryptographic standard, making tokenization outside the scope.Obfuscation (C) – Simple character substitution or masking does not provide genuine cryptographic security. It can be easily reversed and therefore fails to meet any regulatory requirement for protecting cardholder data. It is considered a non-protective technique.Certificates (D) – Digital certificates are used for authentication and establishing TLS sessions; they do not encrypt stored data. They are relevant for communication security but do not address the protection of data at rest, which is the focus of the scenario.Conclusion – For safeguarding patient credit-card information within the records system, the most appropriate cryptographic standard is Symmetric Encryption , as it directly fulfills the confidentiality, performance and compliance criteria required for handling sensitive payment data.
PCI Security Standards Council – PCI DSS v4.0, Requirement 3.5 – https://www.pcisecuritystandards.org/document_library?document=pci_dss NIST Special Publication 800-57 Part 1 Rev. 5 – Recommendations for Key Management – https://csrc.nist.gov/publications/detail/sp/800-57-part1-rev5/final
Post your Comments and Discuss IAPP CIPT exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CIPT content, but please register or login to continue.