During the design of a role-based user access model for a new application, which of the following principles is MOST important to ensure data privacy is protected?

During the design of a role-based user access model for a new application, which of the following principles is MOST important to ensure data privacy is protected?
A . Segregation of duties
B . Unique user credentials
C . Two-person rule
D . Need-to-know basis

View Answer

Answer: D

Explanation:

The need-to-know basis principle is a security principle that states that access to personal data should be limited to those who have a legitimate purpose for accessing it. The need-to-know basis principle helps to protect data privacy by minimizing the exposure of personal data to unauthorized or unnecessary parties, reducing the risk of data breaches, leaks, or misuse. The need-to-know basis principle should be applied when designing a role-based user access model for a new application, by defining clear roles and responsibilities for different users, granting access rights based on their roles and functions, and enforcing access controls and audits to monitor and verify data access.

Reference: CDPSE Review Manual (Digital Version), page 105