Which principle ensures personal data is protected from breach?

Which principle ensures personal data is protected from breach?

• A. Personal data must be encrypted at rest
• B. Personal data must be handled in a way that ensures security
• C. Personal data can be ignored if it is old
• D. Personal data must be stored in a public cloud

Answer: (B)

Protecting personal data from breach comes down to handling it in a way that keeps it secure at all times. This means applying safeguards throughout the data’s life cycle—who can access it, how it’s stored and transmitted, how it’s processed, and how it’s disposed of. A broad approach like “handled in a way that ensures security” covers many safeguards (access controls, authentication, encryption, secure channels, backups, monitoring, and incident response) and is why it’s the best fit. Encryption at rest is a useful tool, but on its own it doesn’t address every pathway data might take or every risk (such as how data is transmitted or who is allowed to view it). Ignoring old data conflicts with retention principles, and storing in a public cloud isn’t inherently safe unless robust security measures are in place.

Protecting personal data from breach comes down to handling it in a way that keeps it secure at all times. This means applying safeguards throughout the data’s life cycle—who can access it, how it’s stored and transmitted, how it’s processed, and how it’s disposed of. A broad approach like “handled in a way that ensures security” covers many safeguards (access controls, authentication, encryption, secure channels, backups, monitoring, and incident response) and is why it’s the best fit.

Encryption at rest is a useful tool, but on its own it doesn’t address every pathway data might take or every risk (such as how data is transmitted or who is allowed to view it). Ignoring old data conflicts with retention principles, and storing in a public cloud isn’t inherently safe unless robust security measures are in place.