Which practices constitute privacy by design for an address management system?

Which practices constitute privacy by design for an address management system?

• A. Minimize PII storage, encrypt data at rest and in transit, implement strict access controls, mask sensitive fields in logs, and enable easy data purge/anonymization
• B. Store all PII; no encryption; open access
• C. Ignore access controls
• D. Do not allow data purge

Answer: (A)

Privacy by design means building protection into the system from the start. For an address management system, the strongest approach combines data minimization, encryption, access controls, log masking, and flexible data erasure. Minimizing PII storage reduces the amount of sensitive information you hold. Encrypting data at rest and in transit keeps information protected even if storage or networks are breached. Strict access controls ensure only authorized users can view or modify addresses. Masking sensitive fields in logs prevents exposing PII through operational logs. Enabling easy data purge or anonymization supports retention policies and helps fulfill user rights. The other options fail because they involve collecting unnecessary data, skipping encryption, allowing open access, ignoring controls, or blocking data deletion, all of which undermine privacy protections.

Privacy by design means building protection into the system from the start. For an address management system, the strongest approach combines data minimization, encryption, access controls, log masking, and flexible data erasure. Minimizing PII storage reduces the amount of sensitive information you hold. Encrypting data at rest and in transit keeps information protected even if storage or networks are breached. Strict access controls ensure only authorized users can view or modify addresses. Masking sensitive fields in logs prevents exposing PII through operational logs. Enabling easy data purge or anonymization supports retention policies and helps fulfill user rights. The other options fail because they involve collecting unnecessary data, skipping encryption, allowing open access, ignoring controls, or blocking data deletion, all of which undermine privacy protections.