Which principle best aligns with privacy policies when deploying security technology?

• A. Privacy laws are optional.
• B. Technology should be used proportionately, with access controls, data minimization, and compliance with privacy laws.
• C. Data minimization is optional.
• D. Technology should be used aggressively to collect data.

Answer: (B)

When deploying security technology, the guiding idea is to protect people’s privacy while still achieving security goals. The best approach is to use the technology proportionately to the risk, implement strict access controls to protect any collected data, minimize the amount of data you collect and retain, and ensure activities comply with applicable privacy laws. Proportionality means the monitoring or data collection should match the specific security objective and avoid overreaching beyond what’s necessary. Data minimization reduces the exposure and simplifies data handling, making breaches or misuse less damaging. Access controls restrict who can see data, reducing insider risk and accidental exposure. Compliance with privacy laws provides a legal and ethical framework, covering notice, purpose limitation, data subject rights, and proper handling and retention.

Choosing this path over others preserves trust and reduces legal and reputational risk: privacy laws aren’t optional, data minimization isn’t optional, and using technology to aggressively collect data is contrary to responsible privacy practices.