Question 10
Domain 2 — Personal Data Lifecycle ManagementAn online business posts its customer data protection notice that includes a statement indicating information is collected on how products are used, the content viewed, and the time and duration of online activities. Which data protection principle is applied?
Correct answer: C
Explanation
Data use limitation applies because the notice describes collecting only information tied to product use and online activity, which fits limiting data collection and use to stated purposes. The principle requires that personal data be gathered and used only for specified, legitimate purposes, such as "how products are used, the content viewed, and the time and duration of online activities."
Why each option is right or wrong
A. Data integrity and confidentiality
Integrity and confidentiality focus on securing data against unauthorized access, loss, or alteration.
B. System use requirements
System use requirements describe acceptable system behavior or access rules, not privacy-purpose limits.
C. Data use limitation
The notice is describing collection tied to a defined business purpose: tracking how the service is used, what content is accessed, and when and for how long sessions occur. Under the data use limitation principle, personal data must be collected and processed only for specified, explicit, and legitimate purposes, and not further used in a way incompatible with those purposes; this is the principle being evidenced by the stated scope of collection.
D. Lawfulness and fairness
Lawfulness and fairness concern legal basis and transparent treatment, not the specific limit on data use.