Question 1 of 17
The scenario highlights the fundamental requirement that privacy obligations follow the data through the processing context. This means that even if data is technically anonymized, if it can be linked back to identifiable individuals through auxiliary data or other means, it remains personal data and is subject to the relevant privacy protections. The organization must therefore carefully assess the potential for re-identification and implement appropriate safeguards to mitigate this risk.
Strong Interview Answer
Treat the hashed addresses as personal information because the organization can still link the values back to identifiable customers.
What to Listen For
- linking values back to identifiable customers
- auxiliary data
- reidentification risk
- privacy obligations follow the data
Caution
Do not restate the multiple-choice stem or ask the learner merely to name a product, rule, or term.