Which of the following should be used to address data kept beyond its intended lifespan?

Which of the following should be used to address data kept beyond its intended lifespan?
A . Data minimization
B . Data anonymization
C . Data security
D . Data normalization

View Answer

Answer: A

Explanation:

Reference: https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/principles/data-minimisation/

Data minimization is a privacy principle that requires limiting the collection, storage and processing of personal data to what is necessary and relevant for the intended purposes. Data minimization should be used to address data kept beyond its intended lifespan, as it helps to reduce the amount of data that is stored or retained, and to delete or dispose of data that is no longer needed or justified. Data minimization also reduces the privacy risks and costs associated with data storage and retention, such as data breaches, unauthorized access, misuse or loss of data. The other options are not effective ways to address data kept beyond its intended lifespan. Data anonymization is a technique that removes or modifies all identifiers in a data set to prevent or limit the identification of the data subjects, but it does not address the issue of data retention or deletion. Data security is a process of applying technical, administrative and physical measures to protect the confidentiality, integrity and availability of data, but it does not address the issue of data retention or deletion. Data normalization is a technique that organizes the data in a database to reduce redundancy and improve consistency, but it does not address the issue of data retention or deletion1, p. 75-76

Reference: 1: CDPSE Review Manual (Digital Version)