Data Privacy Quiz

The fundamental protocols that enable communication between devices on the internet. They work together to ensure data is transmitted effectively.

A system that sends data across networks in small packets, each containing a piece of a message.

A unique numerical address assigned to a device on a network, allowing it to be located and identified.

A user-friendly name associated with an IP address, making it easier to remember and access websites.

Servers that maintain a database of top-level domain names (TLDs) and their corresponding IP addresses, enabling the internet to function.

The protocol on which the World Wide Web is built. It enables communication between web browsers and web servers, transferring web pages and other content.

A secure version of HTTP that encrypts data transmitted between a web browser and server, protecting sensitive information.

A hierarchical system of domain names, consisting of top-level domains (TLDs), second-level domains (SLDs), and potentially further subdomains.

Any process that removes personal identifiers (direct and indirect) from data. It's not a single technique, but a collection of approaches like removing names, addresses, and other details.

Data that has been stripped of all identifying information, both directly and indirectly, and technical safeguards are in place to prevent re-identification. It's a stronger form of removing information.

Information that directly identifies a person, such as their name, phone number, or government-issued ID.

Information that indirectly identifies a person, such as their date of birth, gender, or location. It can be used to infer identity.

The core subject of data protection laws. It refers to any information relating to an identified or identifiable natural person.

Information that objectively describes a person, like their name or address.

Information that expresses opinions, beliefs, or evaluations about a person.

Information that was previously considered insignificant but can now be used to identify individuals, thanks to advancements in data collection and analysis.

Replacing personal identifiers with artificial ones to protect privacy. It reduces the chances of identifying individuals from the data.

Data with direct and indirect identifiers removed. Makes identifying individuals unlikely, but not impossible.

Identifiers are replaced with artificial ones, held separately and secured. This makes identifying individuals difficult, but not impossible.

Data where technical safeguards prevent re-identification. It is practically impossible to identify individuals from this data.

A US governmental body focusing on consumer protection, including data privacy.

A US government agency focused on standardizing technology, including data privacy techniques.

Replacing identifiers with random values, removing them, or changing them entirely. This is a data privacy technique.

Replacing identifiers with the group average for that specific feature. This is a data privacy technique.

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to personal data processed by organizations within the European Union (EU).

Data that can no longer be linked to a specific individual, even with other data, is referred to as anonymized data.

The GDPR requires that data be anonymized, not just de-identified, to fall outside its scope. This means that any identifiable information should be completely removed or replaced with pseudonyms.

A technique used to protect personal identifiers by adding random noise to them, making precise values difficult or impossible to determine. For example, expressing someone's weight as -10 or +10 pounds instead of an exact figure.

A method to anonymize data by shuffling or replacing identifiers with random meaningless values. This prevents direct linking of identifiers to individuals.

This technique involves comparing a data set to a previously anonymized dataset. The noise function used in the anonymization process should ensure that the data leakage is kept within an acceptable threshold.

A technique for anonymizing data by grouping similar values into ranges or categories. It generalizes information, making it less specific.

Cookies are small text files used by websites to store information on a user's computer to personalize the user experience. They are often used to save login details, track preferences, and enhance browsing.

A network of physical devices connected to the internet that can collect, share, and analyze data without human intervention.

The ability of devices to interact with their surroundings using sensors and actuators, sending data to gateways and clouds for analysis.

The challenges of securing IoT devices against vulnerabilities like weak authentication, shared network access, and limited device management.

A layered approach to IoT security that includes biometric verification, virtual private networks, device management platforms, and regular updates.

The use of standardized regulations to ensure safe and secure IoT environments, such as the General Data Protection Regulation (GDPR) in the EU and the IoT Cybersecurity Improvement Act in the US.

The EU regulation governing data collection and processing, emphasizing user consent and data deletion rights.

The act of ensuring proportionate and transparent policies when handling requests from authorities for user data.

The need to balance technological innovation with user rights and ethical responsibility, particularly in the context of cloud computing and the Internet of Things.

This principle ensures that personal data is handled fairly and transparently, with a clear purpose communicated to individuals before collection.

Companies must have a legitimate and specific reason for collecting and processing personal data, which is communicated to individuals upfront.

Organizations must only collect data that is absolutely necessary for the purpose they've communicated. No unnecessary data collection allowed.

Organizations must ensure data is accurate and up-to-date, and must not use it for purposes incompatible with the original intention.

Personal data should only be stored as long as it is necessary to fulfill the stated purpose for which it was collected.

Companies have a responsibility to implement technical and organizational measures to protect personal data against unauthorized access, accidental loss, or damage.

This principle emphasizes that individuals have the right to access, rectify, erase, and restrict the processing of their personal data.

Companies are expected to implement suitable measures to prevent unauthorized access, use, disclosure, alteration, or destruction of personal data.