Question

A privacy engineer is designing an IoT smart-home hub that processes camera and microphone streams locally at the edge to detect events. To satisfy privacy-by-design, the team wants to ensure raw sensor data never leaves the device and is not retained longer than necessary. Only anonymized event metadata (e.g., 'motion detected at 14:03') is transmitted to the cloud. Which technical design choice BEST embodies data-oriented privacy engineering for the raw sensor streams?

Accepted Answer

Process sensor streams in an ephemeral in-memory buffer that is overwritten in real time, extracting only the anonymized event metadata before any persistence

Answer

Encrypt the raw video and audio at rest on the device and upload it nightly to a secured cloud bucket for backup

Answer

Store the raw streams locally for 30 days with role-based access so support staff can troubleshoot false-positive detections

Answer

Pseudonymize the raw streams with a device-specific key and forward them to the cloud for centralized event detection