Privacy by design paired with data minimization: Which pair of data protection concepts best matches this
Privacy by design plus data minimization together embed protection from the start and limit data to what is necessary.
The question
A team is scoping a new AI system and wants to embed privacy protections from the very start rather than retrofitting them later. They also want to collect only the personal data strictly needed for the model to function. Which pair of data protection concepts best matches this intent?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Breach notification paired with record keeping, focusing on post-incident reporting and documentation logsPlausible but wrong: these address after-the-fact incident handling, not designing in protection and minimizing collection upfront.
- Lawful basis paired with cross-border transfer rules, focusing on legality and international data movementPlausible but wrong: these concern the legal ground and transfer geography, not embedding protection early or minimizing data.
- Privacy by design paired with data minimization, embedding protection early and limiting data collected ✓Correct: privacy by design builds protection in from the outset, and data minimization restricts collection to what is necessary.
- Data portability paired with the right to erasure, focusing on moving and deleting records laterPlausible but wrong: these are downstream data subject rights, not design-stage minimization and built-in protection.
The trap
Selecting reactive or downstream controls instead of proactive privacy-by-design and minimization. How to remember it
Privacy by design plus data minimization together embed protection from the start and limit data to what is necessary.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Purpose limitation: Under core data protection principles applied to AI, which principle most directly governs →
- Conducting a data protection impact assessment to evaluate: Before deployment, which controller obligation is →
- It is treated as a special category warranting heightened: Compared with ordinary personal data, how do data →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.
