Question 27
Domain 1: Data Collection, Use, Dissemination, and DestructionWhich NIST privacy engineering objective is MOST concerned with processing data without directly linking it to a specific individual where possible?
Correct answer: C
Explanation
Dissociability is the NIST privacy engineering objective focused on limiting linkage to a person, because it aims for data to be processed without directly identifying an individual where possible. NIST uses this term for reducing the ability to associate data with a specific person, which matches the question’s description.
Why each option is right or wrong
A. Predictability
B. Manageability
C. Dissociability
NIST Privacy Framework and NISTIR 8062 identify dissociability as the objective that limits the ability to associate data with a particular person or device, including by using de-identification, aggregation, or pseudonymization where feasible. The question’s wording tracks that objective exactly: the processing is done so the data are not directly linked to an identified individual unless a specific operational need requires otherwise.
D. Availability