Which concept is primarily concerned with protecting an individual's sensitive information, including personally identifiable information, from exposure?

Which concept is primarily concerned with protecting an individual's sensitive information, including personally identifiable information, from exposure?

• A. Confidentiality (Cryptography)
• B. Privacy
• C. Hash Digest
• D. Attestation

Answer: (B)

Protecting an individual's sensitive information and personal data from exposure is privacy. This concept centers on how data about a person—especially personally identifiable information (PII)—is collected, stored, used, and shared, and it emphasizes the right of the individual to control that information, including limits on who can see it and how it’s disclosed. Privacy focuses on reducing unnecessary data exposure and ensuring transparency and consent in how data is handled. Confidentiality, while related, is more about restricting access to information to authorized parties and keeping data secret within and across systems. A hash digest serves to verify data integrity, not to protect personal data from exposure. Attestation concerns proving the trustworthiness of a system or component, not safeguarding an individual’s private information.

Protecting an individual's sensitive information and personal data from exposure is privacy. This concept centers on how data about a person—especially personally identifiable information (PII)—is collected, stored, used, and shared, and it emphasizes the right of the individual to control that information, including limits on who can see it and how it’s disclosed. Privacy focuses on reducing unnecessary data exposure and ensuring transparency and consent in how data is handled.

Confidentiality, while related, is more about restricting access to information to authorized parties and keeping data secret within and across systems. A hash digest serves to verify data integrity, not to protect personal data from exposure. Attestation concerns proving the trustworthiness of a system or component, not safeguarding an individual’s private information.