CC6 - Chapter 5

Question 1

are concerned with how to procure, store, manage, interpret, analyze/apply and dispose of data in ways that are aligned with ethical principles including community responsibility.

Answer 1

Data handling ethics

Question 2

This principle reflects the fundamental ethical requirement that people be treated in a way that respects their dignity and autonomy as human individuals. I

Answer 2

Respect for Persons

Question 3

This principle has two elements: first, do not harm; second, maximize possible benefits and minimize possible harms.

Answer 3

Beneficence

Question 4

This principle considers the fair and equitable treatment of people.

Answer 4

Justice

Question 5

PIPEDA Principles

Answer 5

Accountability
An organization is responsible for personal information under its control and must designate an individual responsible for compliance.

Identifying Purposes
The organization must identify the purposes for which personal information is collected before or at the time of collection.

Consent
Consent must be obtained for the collection, use, or disclosure of personal information, except where inappropriate.

Limiting Collection, Use, Disclosure, and Retention
Collection should be limited to what is necessary, and personal information should not be used or disclosed for purposes other than those for which it was collected unless consent is given. Personal information should be retained only as long as necessary.

Accuracy
Personal information must be accurate, complete, and up-to-date.

Safeguards
Personal information must be protected by security safeguards appropriate to the sensitivity.

Openness
The organization must make policies and practices relating to personal information available.

Individual Access
Individuals have the right to access their personal information and challenge its accuracy and completeness.

Compliance Challenges
Organizations must be able to address compliance challenges related to these principles.

Question 6

An organization is responsible for personal information under its control and must designate an individual responsible for compliance.

Answer 6

Accountability

Question 7

The organization must identify the purposes for which personal information is collected before or at the time of collection.

Answer 7

Identifying Purposes

Question 8

Consent must be obtained for the collection, use, or disclosure of personal information, except where inappropriate.

Answer 8

Consent

Question 9

Collection should be limited to what is necessary, and personal information should not be used or disclosed for purposes other than those for which it was collected unless consent is given. Personal information should be retained only as long as necessary.

Answer 9

Limiting Collection, Use, Disclosure, and Retention

Question 10

Personal information must be accurate, complete, and up-to-date.

Answer 10

Accuracy

Question 11

Personal information must be protected by security safeguards appropriate to the sensitivity.

Answer 11

Safeguards

Question 12

The organization must make policies and practices relating to personal information available.

Answer 12

Openness

Question 13

Individuals have the right to access their personal information and challenge its accuracy and completeness.

Answer 13

Individual Access

Question 14

Organizations must be able to address compliance challenges related to these principles.

Answer 14

Compliance Challenges

Question 15

GDPR Principles

Answer 15

Fairness, Lawfulness, Transparency
Personal data shall be processed lawfully, fairly, and in a transparent manner in relation to the data subject.

Purpose Limitation
Personal data must be collected for specified, explicit, and legitimate purposes, and not processed in a manner that is incompatible with those purposes.

Data Minimization
Personal data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

Accuracy
Personal data must be accurate, and where necessary, kept up-to-date. Every reasonable step must be taken to ensure data accuracy, and inaccurate data should be erased or rectified without delay.

Storage Limitation
Data must be kept in a form that permits identification of data subjects only for no longer than necessary for the purposes for which the data are processed.

Integrity and Confidentiality
Data must be processed securely to ensure appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Accountability
Data Controllers shall be responsible for and able to demonstrate compliance with these principles.

Question 16

Personal data shall be processed lawfully, fairly, and in a transparent manner in relation to the data subject.

Answer 16

Fairness, Lawfulness, Transparency

Question 17

Personal data must be collected for specified, explicit, and legitimate purposes, and not processed in a manner that is incompatible with those purposes.

Answer 17

Purpose Limitation

Question 18

Personal data must be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

Answer 18

Data Minimization

Question 19

Personal data must be accurate, and where necessary, kept up-to-date. Every reasonable step must be taken to ensure data accuracy, and inaccurate data should be erased or rectified without delay.

Answer 19

Accuracy

Question 20

Data must be kept in a form that permits identification of data subjects only for no longer than necessary for the purposes for which the data are processed.

Answer 20

Storage Limitation

Question 21

Data must be processed securely to ensure appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Answer 21

Integrity and Confidentiality

Question 22

Data Controllers shall be responsible for and able to demonstrate compliance with these principles.

Answer 22

Accountability

Question 23

United States Privacy Program Criteria

Answer 23

Notice / Awareness
Data collectors must disclose their information practices before collecting personal data.

Choice / Consent
Consumers should be given options regarding how their data is used beyond the initial purpose.

Access / Participation
Consumers should be able to view and contest information about them.

Integrity / Security
Data collectors need to ensure data accuracy and security from unauthorized use.

Enforcement / Redress
Reliable mechanisms should be in place to enforce compliance and address violations.

Question 24

Data collectors must disclose their information practices before collecting personal data.

Answer 24

Notice / Awareness

Question 25

Consumers should be given options regarding how their data is used beyond the initial purpose.

Answer 25

**Choice / Consent**

Question 26

Consumers should be able to view and contest information about them.

Answer 26

**Access / Participation**

Question 27

Data collectors need to ensure data accuracy and security from unauthorized use.

Answer 27

**Integrity / Security**

Question 28

Reliable mechanisms should be in place to enforce compliance and address violations.

Answer 28

**Enforcement / Redress**

Question 29

It is possible to lie through omission or inclusion of certain data points in a report or activity based on timing. Equity market manipulation through ‘end of day’ stock trades can artificially raise a stock price at closing of the market giving an artificial view of the stock’s worth. This is called market timing and is illegal.

Answer 29

**Timing **

Question 30

Charts and graphs can be used to present data in a misleading manner. For instance, changing scale can make a trend line look better or worse. Leaving data points out, comparing two facts without clarifying their relationship, or ignoring accepted visual conventions.

Answer 30

**Misleading Visualizations**

Question 31

refers to an inclination of outlook. On the personal level, the term is associated with unreasoned judgments or prejudices.

Answer 31

**Bias**

Question 32

is the practice of making information anonymous, or removing sensitive information.

Answer 32

**Obfuscating or redacting data**