Question

A data privacy solutions engineer is reviewing a new analytics platform that combines de-identified customer purchase records with publicly available demographic datasets to build marketing segments. During threat identification, the engineer must determine which privacy threat is MOST directly introduced by this design before risk scoring can proceed. Which threat should be identified as the primary concern?

Accepted Answer

Re-identification through inference by correlating de-identified records with external datasets

Answer

Unauthorized access to the analytics platform due to weak authentication controls

Answer

Loss of data availability if the analytics platform experiences an outage

Answer

Failure to encrypt purchase records while stored in the analytics database