Question

A privacy engineer is assessing a new analytics platform that combines pseudonymized customer transaction data with third-party demographic datasets to build behavioral profiles. During threat identification, the engineer must prioritize the privacy threat that most directly arises from combining these datasets. Which threat should be identified as the PRIMARY concern?

Accepted Answer

Linkability — the ability to correlate pseudonymized records across datasets to re-identify individuals

Answer

Non-repudiation — the inability of individuals to deny that they performed a transaction

Answer

Data availability loss due to the increased storage demands of combined datasets

Answer

Insider misuse of administrative credentials on the analytics platform